Glen Zorn wrote:
> Alan DeKok [mailto://al...@deployingradius.com] writes:
>>   Channel bindings closes a security issue in current deployments of the
>> EAP protocol.
> 
> Is that true?  If all you want is to solve the case where "...the NAS could
> tell the user "we're partner X: $0.05 / minute".  It could *really* be
> partner Y:
> $5.00 / minute.  The user naively connects, and the bill is larger than
> expected.  The partner gets paid, and the user gets blamed for not paying
> attention.", I think that that could probably be accomplished with EAP-TTLS
> right now.

  There is no standardized mechanism to do that.

  Alan DeKok.
_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu

Reply via email to