Re: iSCSI: 7.2.1 CHAP Considerations (12-98)

[Steve Senum <ssenum@cisco.com>]

Ofer Biran wrote:
>
> On initiator-only authentication this puts the responsibility
> only on the initiator implementation who surely knows the
> secret and its length.
> 

While I believe the above is true in general,
I think there might be situations where the
the initiator could pass the challenge to another
application (or system) to compute the reply,
and thus not have direct access to the CHAP secret.

Regards,
Steve Senum