eap Mailing List: Re: Re: Issue 352: Channel Binding Issue

[Bernard Aboba (bernard_aboba]

> Anyway, as I said in another e-mail, I really don't want
> the EAP keying framework to pick a channel binding solution.
> If it helps, we could drop all discussion of implementation
> approaches for channel bindings, and just focus on the
> desired behaviour.

We definitely should focus on describing the security problem (not sure 
we've done a good job with this yet), and the behavior.   The proposals 
could be referenced, but I don't think we can pick a solution at this time, 
if only because we don't have implementations in the field yet as far as I 
know.