Alan DeKok [mailto://al...@deployingradius.com] writes:

...

>   Channel bindings closes a security issue in current deployments of the
> EAP protocol.

Is that true?  If all you want is to solve the case where "...the NAS could
tell the user "we're partner X: $0.05 / minute".  It could *really* be
partner Y:
$5.00 / minute.  The user naively connects, and the bill is larger than
expected.  The partner gets paid, and the user gets blamed for not paying
attention.", I think that that could probably be accomplished with EAP-TTLS
right now.

_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

Reply via email to