RE: [Sterman Issue 7] Message Authenticator: Options

["Glen Zorn \(gwz\)" <gwz@cisco.com>]

Avi Lior <> wrote:

...

>> Also, should RADIUS Digest go through unmodified, standard RADIUS
>> proxies? If so, how would they be aware of a new AVP that they
need
>> to process?
> 
> Yes that would be a problem.  They wouldn't be aware of it. So
there
> is that issue as well. 

So, does this mean that as far as the IETF is concerned RADIUS
security is good enough, forever (I assume that this reasoning was
at least in part behind the injunction against 'new security
methods' in the charter)?

~gwz

Why is it that most of the world's problems can't be solved by
simply
  listening to John Coltrane? -- Henry Gabriel


--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>