5.1.3 Authentication Outcomes

Because the cleartext EAP success or failure messages can be tampered with, implementations need to rely only on the EAP Extensions method with Result TLV's status messages to determine the outcome of a session.