eap Mailing List: RE: EAP-AKA review

[henry.haverinen (henry.haverinen]

Yoshihiro,

> RFC 3748 does not specify when to send an EAP-Request/Notification.
> If EAP-AKA allows EAP Notification, but does not specify when to sent,
> there is no specification so far that defines when to send an
> EAP-Request/Notification during EAP-AKA.  It seems that there are two
> choices:
> 
> (a) Have an explicit text saying that EAP-AKA does not prohibit EAP
> Notification but it is out of the scope of the document as to when an
> EAP-Request/Notification is sent within EAP-AKA.
> 
> (b) Just prohibit EAP Notifications during EAP-AKA.
> 
> My personal preference is (b) for simplicity unless there is specific
> reason to allow EAP Notification during EAP-AKA in addition to
> AKA-Notifications.

I agree that these are the choices we have. In case (a) we should also have
explicit text saying that EAP-AKA does not protect EAP Notifications.

I'm fine either way. I agree that (b) would be simpler. I'm not able to 
convince myself
that (a) would never be useful -- for example if EAP-AKA is run within 
a tunneling method. So if it was up to me I'd choose (a).

Best regards,
Henry