eap Mailing List: Channel binding approaches (Was: Re: [eap] Strawman -10)

[Jari Arkko (jari.arkko]

The channel binding discussion has been interesting. I can
actually see a number of different alternatives even
within Yoshihiro's method. For instance, L2 could negotiate
the use of channel bindings and have AAA inform the server
of the need to use MSK_cb instead of the regular MSK. Or
EAP method could negotiate this. Or the use of channel
bindings would be dictated by the used lower layer,

I'm not sure which approach is the best one; there
are tradeoffs. Generally I like approaches where
we don't need to change EAP methods but YMMV.

In any case, I'm happy with what the -10 says about
channel bindings, and perhaps the results of this
discussion can be incorporated to Yoshihiro's draft.

--Jari