[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [dhcwg] [New I-D] DHCP User-based Authentication

I have the following three questions:

   1. Why is DHCP the correct protocol to do user-based authentication?
   2. How would this work interact with RFC 3118 (as mentioned by Andre
      Kostur)?
   3. At this late date it seems wise to at least address the issue of
      the authentication server proving itself to the connecting
      device.  This seems to me to change the nature of risk with regard
      to who is giving up information.  What in your proposal is to
      prevent a rogue DHCP server from snarfing passwords?

Thanks,

Eliot

_______________________________________________
dhcwg mailing list
dhcwg at ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg