Tls13 on Damien Dye's Blog https://blogs.damiendye.uk/en/tags/tls13/ Recent content in Tls13 on Damien Dye's Blog Hugo en-GB Tue, 13 Oct 2026 17:30:00 +0100 One SSID, Every Device On Its Own VLAN: 802.1X With step-ca Certificates https://blogs.damiendye.uk/en/networking/eap-tls-one-ssid-every-device-on-its-vlan/ Tue, 13 Oct 2026 17:30:00 +0100 https://blogs.damiendye.uk/en/networking/eap-tls-one-ssid-every-device-on-its-vlan/ Certificate-based 802.1X on wired ports and one WPA-Enterprise SSID, each device put on its VLAN by RADIUS: step-ca roles in every certificate, FreeRADIUS on TLS 1.3 only, an override list, CRL revocation and RadSec. Simulated end to end, every config file in full, Netgear and TP-Link settings, and why Cyber Essentials does not require it.