24 Oct
2014
24 Oct
'14
1:42 p.m.
Alex Gregory wrote:
I was under the impression that, with EAP, it encapsulates the password in the EAP transmission.
Yes.
If I can only do EAP, then that means it can never send it in the clear.
No. EAP-TTLS uses EAP, TLS for security, and sends a PAP password inside of the TLS tunnel. So the password is in the clear. Alan DeKok.