RE: [Isms] RE: Follow up on Authorize Only issue

["Bernard Aboba" <bernard_aboba@hotmail.com>]

> What's actually silly is talking about untrusted NASen at all: if a RADIUS 
> client that has a valid >shared secret has been compromised, life is pretty 
> much over anyway.

There is still the 'cascading vulnerabilty' problem.

That is, compromise of a single NAS should not imply compromise of other 
services, NASes or users.



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>