[draft-ietf-radext-digest-auth-00 - ISSUE 7] Message Authenticato r

[Avi Lior <avi@bridgewatersystems.com>]

Based on the comments received on this issue.
-It is important to have some sort of authenticator.
-Message Authenticator(80) is not busted - HMAC-MD5
-Digest Authentication is based on MD5 anyway.

I propose that we make Message-Authenticator(80) mandatory to protect the
Access-Requests.



------------------------------------------------
Avi Lior                                    
Bridgewater Systems Corporation                
Phone :  (613) 591-9104 x6417
Cell    :  (613) 297-2177
E-mail : mailto:avi@bridgewatersystems.com
www.bridgewatersystems.com 
 

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>