IP-Address

[Alan DeKok]

Nick Lowe wrote:
> 2) Identity spoofing would not be able to occur via the EAP outer
> identity, given the first requirement.

  The outer identity is required to be anonymized in many EAP methods.
So it should be "anonymous", or "anonymous at example.com", or
"@example.com".  Anything else is probably wrong.

  FreeRADIUS could arguably look for that, and issue warning messages if
it wasn't seen.

  Alan DeKok.