12 Jul
2024
12 Jul
'24
7:27 a.m.
Mandi! Alan DeKok In chel di` si favelave...
The attack has nothing to do with Active Directory.
I know. I'm simply listing a use case.
See my FAQ above. There are clear descriptions for who is vulnerable, and who is not.
I've read, but seems not so clear to me, so i've asked.
PEAP is really MS-CHAP inside of TLS, inside of EAP, inside of RADIUS. When you just use MS-CHAP over RADIUS, it's insecure. Don't use that. Ever.
OK. Thanks. --