A few Security Features Freshness: each peer contributes a nonce Channel binding: the client indicates the server it thinks it’s talking to Protected Pin change Protected results: Client confirmation exchange Selection: Server realm ID in initial request |