Hi Vadim,

Extending EAP-Failure/EAP-Success has been discussed in the past. People have 
expressed that it would be good to protect EAP-Failure/EAP-Success and to be 
able to send data with them. Changing EAP-Failure/EAP-Success is however not 
seen as possible and was not discussed in any recent discussion.

EAP allows other protected/unprotected result indicatiors in the method or in 
lower layers. The recent discussion was to use the TLS layer for result 
indicatiors or to extend the EAP-TLS request packet format. As Alan think 
extending the EAP-TLS packets is more complex, the only remaining alternatives 
on the table is to rely on the TLS layer.

Cheers,
John


_______________________________________________
Emu mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/emu

Reply via email to