We use .ac.uk though (and much of the non-USA world uses .ac.ccTLD similarly) so no need to whitelist individual university domains. I don't know about Apple, b

We use .ac.uk though (and much of the non-USA world uses .ac.ccTLD similarly) so no need to whitelist individual university domains. I don't know about Apple, but that's a common approach. (And does irritate some where they don't use either and get missed, Canada for example.)