Re: [eap] REVISED Last Call: 'Extensible Authentication Protocol (EAP)' to Proposed Standard

[Jari Arkko <jari.arkko@piuha.net>]

Puthenkulam, Jose P wrote:
> In section 7.2 [c]
>
> Replace "acknowledged result indications" with "protected result
> indications". It makes more sense to have the EAP method indicate its
> result in a protected manner than making sure the result is
> acknowledged.

Ok. The term is defined in 7.2.1, and the text already requires protection,
I agree that the name "protected result indications" would be appropriate.
Need to change the name then in both 7.2 and 7.2.1 as well as in a few
other places in the document...

> Also for section 7.4 Man-in-the-middle attacks would it not be
> appropriate to add an informative reference to the EAP Binding Draft and
> the Nokia Mitm paper.

Yes, this would be appropriate.

Thanks for your comments.

--Jari