I get the impression people haven't seen this: https://www.youtube.com/watch?v=gkPvZDcrLFk
Note this was presented in *2012*. As Tim has said many, many times, you really should be validating the server, even if you have the option to not. Thus, whether or not that option is available is kinda irrelevant. On 2021-02-10 11:36:36+0000, Mathieu Sturm wrote: > I've ordered a Pixel 5 and will do some testing as well. > I've been testing with a virtual android 11 on android studio. This virtual > android 11 also had the option to select "don't validate" option. > > I will share my findings once testing has been done. > > > Mathieu Sturm > Hoofdmedewerker Netwerkbeheer > > [https://www.hogent.be/www/assets/Image/logo2018.png] > > Directie Financiën, Infrastructuur en IT > Afdeling Netwerkbeheer > Campus Schoonmeerssen - Gebouw B Lokaal B0.75 > Valentin Vaerwyckweg 1 - 9000 Gent > +32 9 243 35 23 > www.hogent.be<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hogent.be%2F&data=02%7C01%7Cmathieu.sturm%40hogent.be%7C86879fbc6e8c49ab13ff08d67ac4edef%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C636831383554731873&sdata=8NfYjNEE4XDViDT6wMtCYFa0cY8g5CXqS9kf7VtYBcU%3D&reserved=0> > > > > Van: The EDUCAUSE Wireless Issues Community Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Namens Dom Colangelo > Verzonden: dinsdag 9 februari 2021 18:26 > Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Onderwerp: Re: [WIRELESS-LAN] android 11 upcoming changes Feb 15th 2021 > > In my testing I found that networks saved prior to the patch retained the > 'Don't validate' option. Forgetting and re-configuring the network eliminated > the option. > > [cid:image005.png@01D6FFA9.5BA6C3E0]Dom Colangelo > Systems Engineer > Omada Technologies > Cell: (617)-446-3945 > dcolang...@omadatechnologies.com<mailto:dcolang...@omadatechnologies.com> > > From: The EDUCAUSE Wireless Issues Community Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > On Behalf Of Tim Cappalli > Sent: Tuesday, February 9, 2021 12:15 > To: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > Subject: Re: [WIRELESS-LAN] android 11 upcoming changes Feb 15th 2021 > > Screenshot? > > From: The EDUCAUSE Wireless Issues Community Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > on behalf of Walter Reynolds <wa...@umich.edu<mailto:wa...@umich.edu>> > Date: Tuesday, February 9, 2021 at 12:03 > To: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > Subject: Re: [WIRELESS-LAN] android 11 upcoming changes Feb 15th 2021 > > I have a Pixel 3 that I did a factory restet on. Next I did all the updates > needed and it is running Android 11. The build number is RQ1A.210205.004 > which includes the latest security patch for the phone. > > When I go to configure a WPA2 Enterprise network I still have the "Don't > validate" option. > > What am I missing here? > > ------------------------ > Walter Reynolds > Network Architect > Information and Technology Services > University of Michigan > (734) 615-9438 > > > On Sun, Feb 7, 2021 at 3:29 AM Tim Cappalli > <00000194c9ecac40-dmarc-requ...@listserv.educause.edu<mailto:00000194c9ecac40-dmarc-requ...@listserv.educause.edu>> > wrote: > I would not expect Pixel 2 and earlier to receive this update as they are end > of support. > ________________________________ > From: The EDUCAUSE Wireless Issues Community Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > on behalf of Richie Penuela > <richie.penu...@ucf.edu<mailto:richie.penu...@ucf.edu>> > Sent: Friday, February 5, 2021 09:37 > To: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > Subject: Re: [WIRELESS-LAN] android 11 upcoming changes Feb 15th 2021 > > > Mathieu, > > > > Currently this is affecting Google Pixel 3 and up that have installed the > Android 11 security patch in December. We have Google Pixel 2A w/ Android 11 > but the last security patch was provided prior to the one in December and we > are still to select "Do not validate" option. In conversation with some of > our integrators they believe that other Android platforms will follow suit. > > > > -Respectfully, > > > > [signature_2043038681] > > Sr. Wireless Engineer > > UCF IT | Telecommunications > > University of Central Florida > > 407.823.4906 > > richie.penu...@ucf.edu<mailto:richie.penu...@ucf.edu> > > > > Please note: Florida has a very broad open records law (F.S. 119). Emails may > be subject to public disclosure > > > > > > From: The EDUCAUSE Wireless Issues Community Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > on behalf of Mathieu Sturm > <mathieu.st...@hogent.be<mailto:mathieu.st...@hogent.be>> > Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > Date: Friday, February 5, 2021 at 9:32 AM > To: > "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" > > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > Subject: Re: [WIRELESS-LAN] android 11 upcoming changes Feb 15th 2021 > > > > Hello all, > > > > I've been testing with 2 devices (Samsung s10 upgraded to android 11 and > Samsung s20 also upgraded to android 11). > > It seems that I'm still able to select "Do not validate" on these devices. > > > > Is this because these devices were upgraded to android 11 and that the newer > devices which were released with android 11 don't allow the "Do not validate"? > > Or are the pixel phones the only ones? > > > > Regards, > > > > Mathieu > > > > Van: The EDUCAUSE Wireless Issues Community Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> > Namens Hurt,Trenton W. > Verzonden: maandag 1 februari 2021 22:47 > Aan: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > Onderwerp: [WIRELESS-LAN] android 11 upcoming changes Feb 15th 2021 > > > > FYI > > > > I just received the following from securew2 about some additional security > changes coming to android 11. > > > > > > > > This action will need to take place before the upcoming Android application > update that is planned for February 15th, 2021. > > > > As you may already be aware, Google mandates server validation to be properly > configured for WiFi from Android version 11. This means that any 802.1X WiFi > configuration without the following two settings will fail to connect. > > > > 1. Server Validation > > 2. Connect to these server names > > > > For more information about these configurations, please read below. > > > > What is Server Validation in a Network Profile? > > This configuration item is for clients to validate a RADIUS server > certificate chain during an EAP authentication. Clients would forward its > requests only when the received server certificate is signed by the CA that > is configured on the SecureW2 Network Profile. It may be required to upload > only the Root CA of the RADIUS server certificate, however, in some cases, > the full chain may need to be provided. > > > > What is the Connect to these server names field? > > This field is used to specify the name of your RADIUS server certificate > using its Common Name. If there is only one RADIUS server in your setup, you > can quickly find this name from the certificate. If there are more than one > RADIUS servers, or if the RADIUS server Common Name has more than two > subdomains, we advise to use a wildcard name. > > > > For example: > > If the RADIUS server certificate's Common Name = > radius.domain.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fradius.domain.com%2F&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645408687%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=lJzoNw9HGg1PWfh3l9XowdX2z8QE2JHPMFUm6it2KC4%3D&reserved=0> > Connect to these server names should be > radius.domain.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fradius.domain.com%2F&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645408687%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=lJzoNw9HGg1PWfh3l9XowdX2z8QE2JHPMFUm6it2KC4%3D&reserved=0> > > > > If the RADIUS server certificate's Common Name = > radius.lab.department.domain.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fradius.lab.department.domain.com%2F&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645418684%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=AJfcw5OLek2JJ01Bcs%2BdmDTsIMfCK9g5MclLX6mZ7XM%3D&reserved=0> > Connect to these server names should be > *.department.domain.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdepartment.domain.com%2F&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645428671%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=kJ0oQx2l370WWHHjItkOcuTj3hLKkGvMmX6VtOh%2F864%3D&reserved=0> > or > *.domain.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdomain.com%2F&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645428671%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=pbr3Sg%2BYl0BFleK3U2eVdMf%2FuEhNDzoFbP98MaHoKD0%3D&reserved=0> > > > > > > > > > > Thanks > > Trent > > > > Trenton Hurt, CWNE #172,ACMP,ACCP,CCNP(W),CCNA(W),CCNA(V),CCNA(R/S) > > Network Analyst > > University of Louisville > > Phone (502) 852-1513 > > > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645438670%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=2qc4MRltkYgZxJ8n9kSlMiAsYLduk8pQl9XLTUjIY14%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645438670%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=2qc4MRltkYgZxJ8n9kSlMiAsYLduk8pQl9XLTUjIY14%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645448660%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=QELN%2BJj3n2lDPO1rX0oK8uzql0qUgLBdOVadsvx%2FVcQ%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645458658%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=lwq7BSNfz4gDVid8hXXhF%2F0h8thkN3UmCZJ6XjA5z1k%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645458658%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=lwq7BSNfz4gDVid8hXXhF%2F0h8thkN3UmCZJ6XjA5z1k%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645468653%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=g2UeXFyFPK8cobBFjIfjRid0dH6CTmabGJDQqyHQGpk%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cmathieu.sturm%40HOGENT.BE%7C4888106b756d4547bf0508d8cd1fc4e6%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C637484883645468653%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=g2UeXFyFPK8cobBFjIfjRid0dH6CTmabGJDQqyHQGpk%3D&reserved=0> > > ********** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community -- Jonathan Waldrep Network Engineer Network Infrastructure and Services Virginia Tech ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
signature.asc
Description: PGP signature
