eap Mailing List: RE: Proposed Resolution to Issue 314: AAA-Key Confusion

[Bernard Aboba (bernard_aboba]

> Other parts of text seems to rightfully imply that the keys are
> transported at the AAA layer, i.e. from AAA server through possibly AAA
> proxies to AAA client, so why are we saying "transported from the EAP
> server to the authenticator"??

Transport from the EAP server to the EAP authenticator is required for mode 
independence.  In this instance the AAA protocol is only a mechanism to 
enable that transport.