Re: [Emu] Potential Issues with EAP-FAST

2009-01-26 Thread Alan DeKok
Dan Harkins wrote: > A tunnel method is definitely in our charter and we have had much > discussion on what that would look like. If you re-read the notes from > IETF 71 there was a long discussion about choosing an existing one to > update and not necessarily rolling a new one from scratch. The

Re: [Emu] Potential Issues with EAP-FAST

2009-01-26 Thread Pasi.Eronen
Chris Hessing wrote: > 1. EAP-FAST feeds the client and server random in to the TLS PRF in > the opposite order that TTLS and PEAP do. I can't think of a good > reason to do this. Is there some security advantage to doing this? > If not, why require implementations to handle this case for no rea

Re: [Emu] Potential Issues with EAP-FAST

2009-01-26 Thread Dan Harkins
Hi Alan, Once this group gets around to selecting a protocol for advancement is it your view that we just have a coronation followed immediately by publication or do we actually get to update the selected protocol to meet our needs? If the former, then yes, we don't have the time. If the latt

Re: [Emu] Potential Issues with EAP-FAST

2009-01-26 Thread Alan DeKok
Dan Harkins wrote: > Once this group gets around to selecting a protocol for advancement > is it your view that we just have a coronation followed immediately > by publication or do we actually get to update the selected protocol > to meet our needs? Portions of any protocol will likely need t

Re: [Emu] Potential Issues with EAP-FAST

2009-01-26 Thread Chris Hessing
Alan DeKok wrote: Dan Harkins wrote: Once this group gets around to selecting a protocol for advancement is it your view that we just have a coronation followed immediately by publication or do we actually get to update the selected protocol to meet our needs? Portions of any proto

Re: [Emu] Potential Issues with EAP-FAST

2009-01-26 Thread Stefan Winter
Hi, > As for security, I think the majority of the Internet community > expects all of the standards setting bodies to put good security high > on their list of things to care about. While the comment that > EAP-TTLS can be just as dangerous in letting credentials out, there is > one major differ

Re: [Emu] Potential Issues with EAP-FAST

2009-01-26 Thread Alan DeKok
Chris Hessing wrote: > Then I must ask a stupid question. Who is the group that decides what > should and shouldn't be allowed? The chairs determine the focus of the group, guided by the WG charter. > While I understand that the changes > EAP-FAST makes to existing EAP methods are already pub