[Nea] Re: NEA network location?

["Bernard Aboba" <bernard_aboba at hotmail.com>]

Steve Hanna said:

"So we should expect the NEA protocols to be used on the Internet
and include relevant requirements in our requirements document
(security, congestion control, loss, wide variations in round
trip time, etc.). But we should not cover non-enterprise use cases
or situations where the endpoint is not owned by or expected to
conform with the policies of the organization that owns and operates
the network."

Of course, this begs the question of how NEA behavior can differ in the 
enterprise and Internet cases. From an authentication perspective, EAP is 
run between the peer to the server, and so the intervening network(s) simply 
don't come into play.  So if you examine packet traces for the "enterprise" 
and the "Internet" cases, there will be no discernible difference between 
them, as long as the peer and server are the same.

Of course, your mileage will vary for other "transports", which may not have 
the same "end to end" properties as EAP.  However, in those cases, there are 
some very fundamental issues with mobility support.  And of course, one of 
the issues motivating NEA is mobility;  if we are talking only about 
desktops sitting in one place, with permanent connectivity, why can't 
existing software update solutions do the job?



_______________________________________________
Nea mailing list
Nea at ietf.org
https://www1.ietf.org/mailman/listinfo/nea