Hi,
Kevin Kofler via devel <devel(a)lists.fedoraproject.org> wrote:
If the default crypto policies fail with the world's largest WiFi
network,
then surely they are too strict to be useful in practice and need to be
relaxed.
It may be the world’s largest WiFi network, but authentication is delegated
to the various institutions. The TLS server that handles authentication is
probably run by this user’s university IT department, and their server does
not support modern TLS.
I hope you’re not suggesting we keep the defaults insecure because there are
some institutions out there that don’t support modern standards.
--
Clemens Lang
RHEL Crypto Team
Red Hat