Re: Sending EAP Identity Encrypted

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Sep 22, 2016 at 09:47:27AM -0700, alan furlong wrote:
> Just to add more info to this. I'm only looking for encryption of
> username part of NAI, and there is no outer tunnel possibility to
> protect the identity in the scenario I'm dealing with.

Why would you need to that instead of using anonymous username and
exchange the real identity in protected manner within the actual EAP
authentication method? Which EAP method(s) are you thinking of using?

> On Thu, Sep 22, 2016 at 9:06 AM, alan furlong <alan250985@xxxxxxxxx> wrote:
> > Is it possible to configure wpa_supplicant to send EAP Identity
> > encrypted for privacy reasons?

It is not really a question of configuration option on the client side.
There is no specification of a protocol for doing this nor support on
the authentication servers for doing something like this. Nor need for
this if the EAP authentication method supports protected exchange of
identities.

-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux