
|
Potential Approaches Server-side Pre-shared keys Typically only used with mutual authentication Certificates Used to sign messages sent from client to server Requires provisioning of trust anchor on the client Client-side Nothing: client authentication not always important Same as before: client proves that it is the same client as in a previous transaction Resource ownership: client proves authorization for a resource (e.g. SEND) Client authentication to the server (e.g. EAP) |