eap Mailing List: Comments on draft-ietf-eap-netsel-problem-06.txt

[Joseph Salowey (jsalowey) (jsalowey]

I've taken a look at the draft and the one concern I have is that it
seems that security considerations are discussed rather lightly.  In
particular they are not discussed in the design considerations.

In the discussion of AAA routing it would be good to have more
discussion of the trust relationships required between AAA systems.
There is also little discussion of authenticating the network and/or
realm that is being accessed or determining that the network is
authorized to provide the services which it may claim to provide.  

Joe