eap Mailing List: Re: Issue 286: Security

[Jari Arkko (jari.arkko]

Hi Farid,

Looking only at your alternative 3 below ...

> 3) Assuming that this is okay, why would there be a need for AAA or AP
> network advertisement?  For example, the peer (user [at] anyisp.com) can
> indicate its route preferences in EAP-Identity/Response as follows:
>
> user [at] anyisp.com; anyisp.com!user [at] isp1; anyisp.com!user [at] isp2;
> anyisp.com!user [at] isp3

... I just wanted to point out that doing this would probably
break NASes that expect to see a NAI and suddenly run into a ';'.
(This may be OK if you are using this only as a last resort,
but then you have probably tried all the four alternatives
already. It isn't clear to me that this would help any more
at that stage.)

--Jari