Re: Reminder: automated key management is often required for new protocols

[Glen Zorn <glen_zorn@yahoo.com>]

Alan DeKok <aland@deployingradius.com> wrote:

Bernard Aboba wrote:
> I think you mean "distribution of long-term credentials" here. In
> (D)TLS the session keys are are fresh for each session (via the use of
> client.random and server.random).

Sure. RFC 4107 calls them "long term session keys", but they're long
term credentials in the context of RADIUS.

 

gwz> What 4107 _really calls them is "long-term keys" (see section 2, paragraph

gwz> 2) but whatever...

...

---

Fussy? Opinionated? Impossible to please? Perfect.  Join Yahoo!'s user panel and lay it on us.