Chris Hessing wrote:

>  Further it bothers me more when
> I see a NIST document that indicates that EAP-FAST is the best choice
> for a secure, but easy to deploy, EAP method.

>Alan DeKok replied: 

>Do the NIST documents permit anonymous provisioning?

[KH]: No. 

Unfortunately w/o anonymous provisioning the "easy to deploy" part kind of
goes out the window…

But I'll check whether the draft needs further clarifications in that
regard.

btw everybody is welcome to submit comments to 800-120comme...@nist.gov
<mailto:800-120comme...@nist.gov?subject=comments%20sp%20800-120>  with
"Comments on SP 800-120" in the subject line. The comment period closes on
January 30, 2009. The draft can be accessed at:
http://csrc.nist.gov/publications/PubsDrafts.html.

 

Katrin Hoeper

_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

Reply via email to