Anyone gutsy enough to try the Xfinity Wifi 'security profile' ?
It generates an XFINITY.mobileconfig. Peeking into the file it appears to contain my username, password and some certificates.
/me walks slowly backwards...
<key>EAPClientConfiguration</key>
<dict>
<key>UserName</key>
<string>paullindner09@comcast.net</string>
<key>UserPassword</key>
<string></string>
<key>AcceptEAPTypes</key>
<array>
<integer>21</integer>
</array>
<key>TLSTrustedServerNames</key>
<array>
<string>*.aaa.wifi.comcast.com</string>
<string>*.aaa.wifi.xfinity.com</string>
</array>
<key>TTLSInnerAuthentication</key>
<string>PAP</string>
</dict>