RE: Authentication Mechanism Matrix (was L2TP vs IPSEC)

[Hugo Krawczyk <hugo@xxxxxxxxxxxxxxxxx>]

On Mon, 19 Jun 2000, Andrew Krywaniuk wrote:

> Hi Glen,
> 
> > > Well, that was basically my point. None of the recent
> > proposals have dealt
> > > with the issue of authenticating both user and machine.
> 
> > Try L2TP/IPSec w/EAP-TLS.
> 
> I wasn't including that as a "recent proposal". I meant the more recent get
> cert type drafts.
> 

The PIC protocol (draft-ietf-ipsra-pic-00.txt) can easily accomodate
(optional) machine authentication *in addition* to (mandatory)
user authentication.
I am in favor of providing that option. It was not included in the
first draft because we did not want to add options for which there
was no clear consensus about their need.
>From recent discussions in the list it seems to me that there may be
strong support for such option, if so we can include it in the next
version of the draft.

Hugo

>