Subject: [eap] Clarifications on "Domino effect"

From: Julien Bournelle <[email-masked]>
Date: Wed, 4 May 2005 15:04:13 +0200

Hi all,

 In RFC4017, the Domino effect is described:

 "Compromise of a single authenticator cannot compromise any other part
 of the system, including session keys and long-term secrets."

 Does this finally imply that the authenticator MUST not provide keys to
 other entity ?

 regards,
-- 
julien.bournelle at int-evry.fr
_______________________________________________
eap mailing list
[email-masked]
http://mail.frascone.com/mailman/listinfo/eap