EAP-IKEv2 MITM prevention (Was: Re: The remaining IKEv2 issues)

[Jari Arkko <jari.arkko@kolumbus.fi>]

I'd like to turn your attention to a document we are
developing in the EAP WG. "The Compound Authentication Binding
Problem" discusses the MITM problem which affects IKEv2 as
well as a number of other protocols such as PIC, PEAP, or
even HTTP Digest inside TLS. The document includes alternative
solutions and a discussion of their properties. It may be useful
reading in terms of the the IKEv2 EAP MITM discussion. The
document is work in progress; the authors feel that its more
or less done, but it has not been very widely reviewed. So,
we'd be very happy if some members of this WG could review the
document, particularly in the context of IKEv2. Here's the URL:

   http://www.ietf.org/internet-drafts/draft-puthenkulam-eap-binding-03.txt

Thanks,

Jari Arkko
(Co-chair of the EAP WG)