*organizations, not situations. From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Tuesday, October 13, 2020 at 14:00 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Just do a quick Google search and you’ll see how many situations instruct users to not validate the server identity (across many operating systems).
It is (and has always been) the #1 problem with legacy credentials/auth methods with tunneled EAP. tim From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Tuesday, October 13, 2020 at 13:59 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification I too am also interested. Michael Catania Sr. Network Analyst Information Technology Services Loyola University Chicago P: 773.508.3712| E: mcata...@luc.edu<mailto:mcata...@luc.edu> From: Gray, Sean<mailto:sean.gr...@uleth.ca> Sent: Tuesday, October 13, 2020 12:57 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Hi Philippe, Thanks for sharing. I’m interested to know if there are any higher Ed institutes out there that don’t onboard clients and push the necessary certs out? How will you be handling this change? Thanks Sean Sean Gray | B.Sc (Hons) Voice, Collaboration & Wireless Network Analyst ITS, University of Lethbridge From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Philippe Hanset Sent: October 13, 2020 11:23 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Android 11 and Cert Verification Caution: This email was sent from someone outside of the University of Lethbridge. Do not click on links or open attachments unless you know they are safe. Suspicious emails should be forwarded to phish...@uleth.ca<mailto:phish...@uleth.ca>. It might have been mentioned on this list before. With this one, repetition might not be a bad idea… [PSA] Android 11's December security update will remove the ability to disable EAP server cert validation https://www.reddit.com/r/networking/comments/j7ero1/psa_android_11s_december_security_update_will/<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.reddit.com%2Fr%2Fnetworking%2Fcomments%2Fj7ero1%2Fpsa_android_11s_december_security_update_will%2F&data=04%7C01%7Ctim.cappalli%40MICROSOFT.COM%7C1f30e4ab6dd74711aea508d86fa1e011%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637382088329594445%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=AIt9cncRWvIcugyebfrdXSczwJozn5L26QSXTdmZNl8%3D&reserved=0> Best, Philippe Philippe Hanset, CEO www.anyroam.net<https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.anyroam.net%2F&data=04%7C01%7Ctim.cappalli%40MICROSOFT.COM%7C1f30e4ab6dd74711aea508d86fa1e011%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637382088329604410%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=ldtDeh8n6ybZ%2FCTFJVEy7ttshYDxzBampKgPgiw%2BZks%3D&reserved=0> Operator of eduroam-US ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ctim.cappalli%40MICROSOFT.COM%7C1f30e4ab6dd74711aea508d86fa1e011%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637382088329604410%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=OLAYOy%2BxyfgmZhc79jdgh%2FGJjOv7HuQbD0GjSFe7WlI%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ctim.cappalli%40MICROSOFT.COM%7C1f30e4ab6dd74711aea508d86fa1e011%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637382088329614359%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=ZB1CivoOwsyr9Xwsn81DCL18EXdHideTDR3umYvi3iM%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ctim.cappalli%40MICROSOFT.COM%7C1f30e4ab6dd74711aea508d86fa1e011%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637382088329614359%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=ZB1CivoOwsyr9Xwsn81DCL18EXdHideTDR3umYvi3iM%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ctim.cappalli%40MICROSOFT.COM%7C1f30e4ab6dd74711aea508d86fa1e011%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637382088329624316%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=RkEOOHxs31JtY7V0VEJoTu%2BPAPmWxsPUXMtHCu3xRgw%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
