eap Mailing List: Clarifications on "Domino effect"

[Julien Bournelle (julien.bournelle]

Hi all,

 In RFC4017, the Domino effect is described:

 "Compromise of a single authenticator cannot compromise any other part
 of the system, including session keys and long-term secrets."

 Does this finally imply that the authenticator MUST not provide keys to
 other entity ?


 regards,
-- 
julien.bournelle at int-evry.fr