3 ms·

I missed this the first time around, is there a paper in addition to the blog post? I am wondering if I misunderstand common implementations of PWA 2 enterprise

by trotsky 14y ago

I missed this the first time around, is there a paper in addition to the blog post? I am wondering if I misunderstand common implementations of PWA 2 enterprise. I was under the impression that mschapv2 was only used inside the server (or mutual) authenticated tls with schemes like peap. Does the chap response actually travel in the clear after tls is used to authenticate the AAA box?

marshray 14y ago
It's sent in the clear in PPTP and RADIUS. I haven't looked at WPA2 personally, but my understanding is that it is in deployments without properly-authenticated certificates.
- yuhong 14y ago
  Yea, the best solution would be a MS-CHAPv3 with the fix from NTLMv2, but...