Protected Extensible Authentication Protocol: Difference between revisions

Revision as of 04:04, 14 May 2007

Revision as of 06:52, 21 May 2007

Line 1:

: ''PEAP is also an acronym for [[Personal Egress Air Packs]].''

'''Protected [[Extensible Authentication Protocol]]''', '''Protected EAP''', or simply '''PEAP''' (pronounced ''"peep"''), is a method to securely transmit [[authentication]] information, including [[password]]s, over wired or [[wireless LAN|wireless network]]s. It was jointly developed by [[Cisco Systems]], [[Microsoft]], and [[RSA Security]]. Note that '''PEAP''' is not an encryption protocol; as with other [[Extensible Authentication Protocol|EAP]] types it only authenticates a client into a network.

PEAP uses only [[server-side]] [[public key certificate]]s to authenticate clients by creating an [[encryption|encrypted]] [[Secure Sockets Layer|SSL]]/[[Transport Layer Security|TLS]] [[Tunneling protocol|tunnel]] between the client and the authentication server, which protects the ensuing exchange of authentication information from casual inspection.