draft-congdon-radius-8021x

[Russ Housley <housley@vigilsec.com>]

I have three comments on this document.

1.  The last paragraph of section 5.1, please change "should" to 
"SHOULD".  It says:

     As a result, when used with IEEE 802.1X, all RADIUS packets are
     authenticated and integrity protected, and should be replay protected
     using IPsec.

2.  The last paragraph of section 5.4, please change "should" to 
"SHOULD".  It says:

     As with the Request Authenticator, for use with IEEE 802.1X
     Authenticators, the Acct-Session-Id should be globally and temporally
     unique.

3.  The text in section 5.6 could lead the reader to expect a future IEEE 
802.11 document to describe authentication and integrity mechanisms for 
management messages.  Current efforts in IEEE 802.11 do not address this issue.

Russ