eap Mailing List: RE: Proposed Resolution of Issue 217: Protected Result Indications

[Bernard Aboba (aboba]

> I think this looks good, but I'm still not clear on what an implicit
> indication is.  Does implicit mean there is no message called protected
> success, but there is a message that serves this purpose or does
> implicit mean that there may not be a message that servs the purpose of
> protected success.

At least in the 7.16 definition, an "implicit" success can occur due to
receipt of a defined message with no preceding error message.  The defined
message need not necessarily be an explicit "success" message. It could
just be part of the authentication exchange, sent only when previous
exchanges have completed successfully.

For example, typically an authentication exchange does not continue if
there has been an authentication failure along the line. This means that
continued evidence of progress can be interpretted as an indication that
previous exchanges were successful.