Protected Extensible Authentication Protocol: Difference between revisions

Revision as of 18:54, 7 December 2006

Revision as of 22:25, 15 December 2006

Line 1:

: ''PEAP is also an acronym for [[Personal Egress Air Packs]].''

'''Protected Extensible Authentication Protocol''', '''Protected EAP''', or simply '''PEAP''' (pronounced ''"peep"''), is a method to securely transmit [[authentication]] information, including [[password]]s, over wired or [[wireless LAN|wireless network]]s. It was jointly developed by [[Microsoft]], [[RSA Security]] and [[Cisco Systems]]. It is an [[IETF]] [[open standard]]. Note that '''PEAP''' is *not* an encryption protocol; as with other EAP types it only authenticates a client into a network.

PEAP uses only [[server-side]] [[public key certificate]]s to authenticate clients by creating an [[encryption|encrypted]] [[Secure Sockets Layer|SSL]]/[[Transport Layer Security|TLS]] [[Tunneling protocol|tunnel]] between the client and the authentication server, which protects the ensuing exchange of authentication information from casual inspection.