Re: Crypto-agility requirement and draft-zorn-radius-encattr/draft-zorn-radius-keywrap

[Alan DeKok <aland@deployingradius.com>]

Stefan Winter wrote:
>>   Yes.  The failure cases for DTLS negotiation are:
>>
>>   a) server doesn't support DTLS (and thinks it's a bad RADIUS packet)
>>   b) server is slow / down
>>   c) attacker is faking (a) or (b)
> 
> d) the network is unreliable and drops some negotiation datagrams?

  Which is indistinguishable from (b).

  Alan DeKok.

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>