Josh Howlett wrote: >> First, how should we handle cases where the protected result disagrees >> with the failure/success message? > > It was my understanding that the protected response is authoritative, and > the unprotected response is ignored. Alan?
They should match, and the unprotected response needs to be sent for the EAP state machine to finish. But that should be it. Alan DeKok. _______________________________________________ abfab mailing list [email protected] https://www.ietf.org/mailman/listinfo/abfab
