Re: l2tp as ipsra solution

["W. Mark Townsley" <townsley@xxxxxxxxx>]

Moshe Litvin wrote:

[text elided]

> I think that the machine
> should be authenticated separately from the user is extremely rare.

I strongly disagree. 

The most obvious case where this is important is use of public terminals
(kiosks and such) for access. There may even be levels of trust within
this group. For instance, you may place greater trust in a machine
located in the business center of a five star hotel for which you have a
contractural agreement with vs. one in a shopping mall or street corner.
The identity of the machine itself here is quite relevant.

- Mark