Disable MAC-address randomization

[jornane]

A new security feature for iOS, and possibly also Android, is MAC address randomization.

Currently, eap-config has no way to indicate that this should be turned off, and I don't know if we can disable this through a profile, but I made this ticket so we can discuss this.

[spaetow]

Apple allows this to be switched off through a .mobileconfig file.

[pauldekkers]

I understand platforms will warn about randomization being turned off in the future; so it may indicate a label that the connection is insecure (just like it labels networks that use WPA1 today).

Maybe good idea to have a broader discussion about the feature in eduroam. We don't need the MAC-address to be persistent in eduroam. Randomization is fine. If this causes issues with DHCP exhaustion at organizations or identifying users, that's a problem anyway with guests and users that enable MAC randomisation outside of the profile configuration.

Anyway, biggest issue I guess before implementing is that it's not possible to flag in .eap-config.