eap Mailing List: Re: network discovery & selection: problem definition

[Jari Arkko (jari.arkko]

Yoshihiro Ohba wrote:

> - Two authentication signaling paths are valid, i.e., 

Yes.

>        
> - SSIDs advertised by APs are valid.
>   (i.e., gamma AP advertises "gamma", delta AP advertises "delta".)

Yes. But see below.

> - The data traffic path is still "valid", i.e., 

Yes.

>   supplicant           <-> gamma AP       <-> delta AP <-> Internet
>   (= gamma's customer)     (= NAT router)
> 
> 
> It seems that actually no entity is doing anything wrong.
> 
> Just that the Gamma Coffeeshop is smart enough to leverage the
> existing acocounting and billing schemes to increase its revenue.

Right.

> If the above observation is correct, I don't see any problem with this
> in terms of security.

Michael started from a case where Gamma was advertising "Delta"
instead. He argued that the protocols should be able to prevent
such lies. I agreed.

The rest is up to the user.

--Jari