TTLS
A proposed wireless security protocol, developed by Funk Software and Certicom, that combines network-based certificates with other authentication such as tokens or passwords. Also known as EAP-TTLS.
With TTLS authentication it's easy to give certificates to your authentication servers, because you have so few of them. TTLS requires only server-side certificates.
So you use those certificates for one-way TLS authentication (network to user), and once you have a nice, safe, encrypted and integrity-checked channel, you can use EAP inside of the TLS tunnel for any other authentication, such as a token or even username/password pairs.
TTLS offers strong mutual authentication without having to distribute and manage certificates for all your users
The problem with TTLS is its limited support among vendors.
From Down and dirty with Wireless LAN security, Network World, 05/06/02.
Compare to
PEAPAdditional resources
TTLS draft
Proposed RFC.
Topic: Wireless/Mobile
Latest wireless news, analysis and newsletters from Network World Fusion.
Add a comment
