TTLS vs PEAP

[Khali Singh]

Dear devs

I am trying to understand the difference between the various flavors of
TTLS and PEAP. Please comment and/or correct the following observations:

1 .Both TTLS and PEAP use TLS for server side authentication and then use
an inner authentication method to authenticate the client.

2. TTLS has a little more flexibility when it comes to choosing the inner
authentication method than PEAP.

3. TTLSv0 is standardized as an RFC and is commonly found in
implementations. TTLSv1 is only  specified as a draft and not commonly
implemented. TTLSv1 relies on a non-standard TLS extension called "Inner
Authentication" which binds the inner and outer authentication to provide
better security and protection.

4. Microsoft only implements and acknowledges PEAPv0. PEAPv1 was specified
by Cisco to add support for EAP-GTC as an inner authentication method. How
big is the difference between PEAPv0 and PEAPv1?

5. What is the difference between PEAPv2 specified in the later versions of
the draft: https://tools.ietf.org/html/draft-josefsson-pppext-eap-tls-eap-10
and the previous versions?

BR
Khali