Re: [Emu] Notes on session resumption with TLS-based EAP methods

2019-02-03 Thread Alan DeKok
On Feb 2, 2019, at 12:03 PM, John Mattsson wrote: > Good suggestion, I'll add something like that to the resumption section in > draft-ietf-emu-eap-tls13 Thanks. >> e.g. TTLS and PEAP both allow session resumption, and when done, skip the >> phase 2 / inner-tunnel authentication. > > That

Re: [Emu] Session identifiers for fast re-authentication

2019-02-03 Thread Alan DeKok
On Feb 3, 2019, at 8:43 AM, John Mattsson wrote: > > I only have editorial comments > > - "defintion" > > - "implemementations" > > - " Session-Id = 0x19 || client.random || server.random). > This definition is already in wide-spread use in multiple PEAP" > > Should remove ")." and

Re: [Emu] Session identifiers for fast re-authentication

2019-02-03 Thread John Mattsson
Looks good! I only have editorial comments - "defintion" - "implemementations" - " Session-Id = 0x19 || client.random || server.random). This definition is already in wide-spread use in multiple PEAP" Should remove ")." and add a blank line. - I noticed that this draft and

Re: [Emu] TLS 1.3 and other EAP methods

2019-02-03 Thread Alan DeKok
On Feb 3, 2019, at 7:46 AM, John Mattsson wrote: > > Based on this discussion I suggest changing the title and the scope of > draft-ms-emu-eaptlscert > > OLD: "Handling Large Certificates and Long Certificate Chains in EAP-TLS" > NEW: "Handling Large Certificates and Long Certificate Chains

Re: [Emu] TLS 1.3 and other EAP methods

2019-02-03 Thread John Mattsson
Based on this discussion I suggest changing the title and the scope of draft-ms-emu-eaptlscert OLD: "Handling Large Certificates and Long Certificate Chains in EAP-TLS" NEW: "Handling Large Certificates and Long Certificate Chains in TLS-based EAP Methods" The problem description, discussion,