Hacker News Reader

I think the question is, what would break if they went forward with using OpenSSL 3 and dropped support for MD4 in wpa_supplicant?

Mschapv2 needs NTLM/MD4. Eduroam uses Mschapv2 inner authentication.

eduroam _can_ use mschapv2, but it's not mandatory. What's in the inner tunnel is up to the individual home institution and their clients.

Educated by a about five minutes of searching and reading, my impression is that not supporting MD4 means not supporting WPA networks.