EAP-TLS vs. EAP-TTLS

[Martin Schneider]

Hello everybody,

I'm not sure, if I got the difference between EAP-TLS and EAP-TTLS
correctly.

EAP-TLS is *only* used for mutual authentication based on certificates
between client and server. But it won't establish a TLS tunnel, that can be
used for executing other/additional EAP methods.

When I need a secure tunnel for executing more EAP methods I need EAP-TTLS?
In EAP-TTLS, mutal authentication is optional, but can be performed like in
EAP-TLS.

I'd appreciate any help of you guys!

Regards,
Martin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20080812/f347a833/attachment.htm