10 Oct
2012
10 Oct
'12
8:07 a.m.
Hi,
Is there any significant downside to using EAP-TTLS/PAP over PEAP?
A few things, one is that you really need to trust the CA/RADIUS server - as your credentials are all passed in the clear inside the TLS tunnel - so if you are talking to a dodgy server you then send them everything secondly...many clients dont support it natively....so you need to install an extra supplicant to do it. not an issue if you are only trying to ensure that Mac users can change password when things are wonky and Windows users use PEAP (which has the 'change/incorrect' support - but how do you stop Mac users using PEAP and still getting themselves stuck? alan