eap Mailing List: Re: network discovery & selection: problem definition

[Michael Richardson (mcr]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Jari" == Jari Arkko <jari.arkko [at] piuha.net> writes:
    >> Assuming that we can solve the original layer 2 problem - of
    >> authenticating with the right AP, then we can also solve the
    >> equivalent layer 3 problem

    Jari> Why? Perhaps I'm missing something obvious. But even if I
    Jari> authenticate Gamma to be Gamma in IEEE/EAP/AAA, and Gamma's router
    Jari> in SEND, Gamma can still NAT all my traffic and send it off to
    Jari> Delta.

    Jari> But perhaps you are thinking that the user will see "Gamma" on his
    Jari> screen and cry foul. I'm not very optimistic that most users would
    Jari> do this... Even you and I might have trouble understanding whether
    Jari> "Gamma Global Roaming WLAN" is a legal, another SSID on a
    Jari> virtualized "Delta" AP or a bad guy performing an attack.

  Of course.  And his bill will say "Gamma".
  And if necessary, the customer can dispute it. 

  But, the customer now has the tools to prevent this abuse. If they choose
not to, well, fine. That's not our problem.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr [at] xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device 
driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBP8t/WoqHRg3pndX9AQHB/wQA54JxZu55+ii5g/ESUldjCvQdQKZQd3N8
mVOwtN3waR4JRWt0iXpKFIM2XmYrdHdy/t5Z81/d3F8d1npURPzOARXy1oHHZZR2
tnEfofmJXSPhpwc6JWHz07VJLBlw92fVBgizI1LP5yl5GACEvOKuimQr4bTNvnwX
fVRU7aNWklE=
=f/kR
-----END PGP SIGNATURE-----