Re: [Pana] What to do with I-D: draft-ietf-pana-ipsec

["Alper Yegin" <alper.yegin at yegin.org>]

> As
> for draft-ohba-pana-pemk-02, it specifies (as does 5191) the use of the
> MSK
> which is a _really_ bad idea IMHO -- the EMSK should really be used
> instead.

Why so?

Secure association protocols have been using MSK-driven keys.
And it makes sense, as MSK is what NAS knows (not EMSK).
I have no idea what value using EMSK has, but the obvious cost is to impact
the AAA deployment between the NAS and AAA servers. Today AAA protocols
deliver MSK, not EMSK or any of its children.

Alper