Hi,
Kevin Kofler via devel devel@lists.fedoraproject.org wrote:
If the default crypto policies fail with the world's largest WiFi network, then surely they are too strict to be useful in practice and need to be relaxed.
It may be the world’s largest WiFi network, but authentication is delegated to the various institutions. The TLS server that handles authentication is probably run by this user’s university IT department, and their server does not support modern TLS.
I hope you’re not suggesting we keep the defaults insecure because there are some institutions out there that don’t support modern standards.