Subject: RE: [eap] Proposed resolution to Issue 152: Link layer indications

From: <[email-masked]>
Date: Tue, 12 Aug 2003 16:41:57 +0300

Yes, this looks ok; it's a good idea to mention explicitly
that the Success could be ignored.

Best regards,
Pasi

> -----Original Message-----
> From: ext Bernard Aboba [mailto:[email-masked]]
> Sent: Tuesday, August 12, 2003 4:03 PM
> To: Eronen Pasi (NRC/Helsinki)
> Cc: [email-masked]
> Subject: RE: [eap] Proposed resolution to Issue 152: Link layer
> indications
> 
> 
> How about this?
> 
> In Section 3.4, change:
> 
> "Section 4.2 defines the circumstances in which a peer,
> having concluded an EAP method with successful acknowledged
> result indications, may conclude that a Success packet has
> been lost after expiration of a timeout. In those same
> circumstances, if a peer receives a lower layer success
> indication as defined in Section 7.2, it MAY conclude that a
> Success packet has been lost without waiting for a
> timeout. This ensures that an attacker spoofing lower layer
> indications can at best succeed in a denial of service
> attack."
> 
> To:
> 
> "To improve reliability, if a peer receives a lower layer
> success indication as defined in Section 7.12, it MAY conclude
> that a Success packet has been lost, and behave as it had
> actually received a Success packet. This includes choosing to
> ignore the Success in some circumstances."
> 
> On Tue, 12 Aug 2003 [email-masked] wrote:
> 
> >
> > Hi,
> >
> > Deleting the phrase "having concluded an EAP method with successful
> > acknowledged result indications" certainly makes the paragraph
> > easier to read. But it is precisely the circumstances defined
> > in 4.2, so this does not change the behavior at all...
> >
> > If we want to change the behavior, something like this could do it:
> >
> >    "To improve reliability, if a peer receives a lower layer
> >    success indication as defined in Section 7.12, it MAY conclude
> >    that a Success packet has been lost, and behave as it had
> >    actually received a Success packet."
> >
> > Best regards,
> > Pasi
> 
_______________________________________________
eap mailing list
[email-masked]
http://mail.frascone.com/mailman/listinfo/eap