EAP-TTLS QuestionAug 26 2008 10:36PM Christopher (vooduhal gmail com)
We've been working on implementing PEAPv0/MSCHAPv2 and have decided
that because of the MitM possibility of the TLS piece we would like to
find another solution. We were considering TLS but I had a quick
question about TTLS. Is the authentication server certification
enforcement part of the client or is there a possibility of a MitM
against the server cert as is the case with PEAP?
that because of the MitM possibility of the TLS piece we would like to
find another solution. We were considering TLS but I had a quick
question about TTLS. Is the authentication server certification
enforcement part of the client or is there a possibility of a MitM
against the server cert as is the case with PEAP?
[ reply ]