eap Mailing List: RE: Issue 204: Peer-to-peer operation

[Bernard Aboba (aboba]

> [Joe] So the protected result is not just signaling that the
> authentication was successful, but also that the peer has authorized the
> opening of its port. If the Peer actually wanted to do bi-drection
> authenticaiton perhaps using a different EAP method then it wouldn't
> send a protected result indication of succss even if the first method
> succeeded?

I think those are orthogonal issues.  The peer would send a protected
result indication for the initial method.  The authenticator would then
assume that the peer was happy so that it would not ask the to
authenticate to the peer (e.g. by sending an EAPOL-Start).  But the peer
could always send an EAP-Request if it wanted to do bi-drectional
authentication for some reason.