eap Mailing List: Re: Proposed Resolution to Issue 357: Channel Binding Defintiion

[Bernard Aboba (bernard_aboba]

Yoshi Ohba said:

How about:

"It is expected that the parameters are also agreed upon by the peer
and authenticator via the lower layer if the authenticator is the
valid entity that advertised the parameters."

Question:  What does "valid" mean here?   Do we mean "securely agreed upon"?

How about this:

"A secure mechanism for ensuring that a subset of the parameters transmitted 
by the
authenticator (such as authenticator identifiers and properties) are agreed 
upon by
the EAP peer and server.  It is expected that the parameters are also 
securel agreed
upon by the EAP peer and authenticator via the lower layer if the 
authenticator
advertised the parameters."