Re: protocol support for intercepting proxies

On Tue, Jun 19, 2007, Adrien de Croy wrote:

> ethernet (non IP) level key management / auth subsystem to auth DHCP.  
> One that can cross subnets.  Since most routers are IP routers, ethernet 
> level is a non-starter as well.  You really need an IP level or higher 
> protocol for auth.

Its not more difficult to setup than shared keys for WPA-PEAP IIRC.
Group Profiles/Active Directory has already solved this problem for
distributing authentication keys (at least in the Windows world.)

(Not that this is a workable solution for -everyone-, but certainly
in the corporate environments you're talking about..)




Adrian