A university-affiliated municipal campus offers a self-service portal that issues unique WLAN credentials. What design caution still applies?
Select an answer to reveal the explanation.
Short Explanation
Unique credentials are great; an unlocked portal that hands them out is not. Harden the onboarding portal anyway. Cleartext email PSKs and skipped proofing undo the benefit.
Full Explanation
Self-service onboarding portals that issue unique WLAN credentials still require secure design: protected transport, identity proofing, rate limiting, and auditability. Unique secrets do not excuse a weak enrollment web path. Skipping TLS, proofing, or sending secrets in cleartext undermines onboarding security for campus and municipal users.