The Android section takes the password, builds a Passpoint R1 profile (application/x-wifi-config: PPS MO with HomeSP FQDN and realm renner.uno, EAP-TTLS with inner PAP, AAA server name radius.renner.uno, ISRG Root X1 as trust anchor) in the browser and hands it to Android as a blob. The password is not sent to any server. Matches WLANs that advertise Hotspot 2.0 with domain and NAI realm renner.uno. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>