[pcp] gss-eap

[Alper Yegin <[e-mail]>]

So, I looked at this spec.

This, too, is server-driven. Like EAP is, unlike PCP is. 
Retransmission do happen, not at the EAP layer but at the EAP-lower layer.

Yep, there's no re-auth. It's absence is confirmed! :-)

- What happens if server-side needs to re-key, extend lifetime, change authorization, re-challenge the client? 
Say, the acceptor receives a RADIUS CoA with EAP-Request, what's going to do with it?

Sorry folks, gss-eap as an EAP lower layer spec is incomplete. Whether you recognize and accept this today, or later when you start building complete architectures/systems with it. No worries, you can always add it.

Alper