XFINITY Hotspots

Connect to XFINITY hotspots from Android and Linux without an app.

Android 11
EAP method: TTLS
Identity: your-username
Password: your-password
CA certificate: Use system certificates
Online certificate status: Don't validate
Domain: secure.aaa.wifi.comcast.com
Phase 2 authentication: PAP

The others require a certificate
Get the certificate from FireFox:
/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt
Or download it here

Android 10
EAP method: TTLS
Phase 2 authentication: PAP
Identity: your-username
Password: your-password
CA certificate: (install and use cert file)

Linux (network manager)
Security WPA & WPA2 Enterprise
Authentication: Tunneled TLS
CA certificate: (use file)
Inner authentication: PAP
username: your-username
password: your-password

Linux (wpa_supplicant)
network={
ssid="XFINITY"
scan_ssid=1
key_mgmt=WPA-EAP
eap=TTLS
phase2="auth=PAP"
ca_cert="/root/COMODO_RSA_Certification_Authority.crt"
identity="your-username"
password="your-password"
}