eap Mailing List: RE: Strawman -10/EMSK deletion requirement?

[Salowey, Joe (jsalowey]

Hi Avi,  

> 
> Perhaps you missed my poorly stated point :-)
> 
> What if the user is requesting access to a new application? 
> which could
> also involve the modification of the user's profile. 
> If EMSK is not there, then what do I do? Restart the session? No.
> 
> At anyrate I belive that there could be other use cases... I gave two
> reason why:
> 
> Just-in-time;
> Dynamic-Application provisioning.

[Joe] Would you agree with the following:

"For any specific application once the AMSK is generated for that
application there is no requirement to cache the EMSK for that
application, however there may be a need to cache the EMSK if the system
requires other Masks to be generated. "  

This makes the caching more of a system issue than an issue for one
particular application.