Re: [pcp] gss-eap & client-side rexmit only

[Alper Yegin <[e-mail]>]

Sam,


You claimed you can design an EAP lower layer that's always client driven, and gave GSS-EAP as an example of how you did it.

So, I had already looked at it and still don't see it how.
See below for the last email I sent on this matter which went unanswered. 

Please take a stab at it and let's progress this discussion.


On Sep 20, 2012, at 4:17 PM, Alper Yegin wrote:

> So, I looked at this spec.
> 
> This, too, is server-driven. Like EAP is, unlike PCP is. 
> Retransmission do happen, not at the EAP layer but at the EAP-lower layer.
> 
> Yep, there's no re-auth. It's absence is confirmed! :-)
> 
> - What happens if server-side needs to re-key, extend lifetime, change authorization, re-challenge the client? 
> Say, the acceptor receives a RADIUS CoA with EAP-Request, what's going to do with it?
> 
> Sorry folks, gss-eap as an EAP lower layer spec is incomplete. Whether you recognize and accept this today, or later when you start building complete architectures/systems with it. No worries, you can always add it.
> 
> Alper
> 
> 
> 
> 
> 
>