RadSec (RADIUS over TLS) is a protocol for transporting RADIUS messages over TLS-encrypted TCP/IP
networks. The primary use case for implementing RadSec instead of traditional RADIUS is to protect
RADIUS communications, particularly when those messages must travel across an untrusted
network, such as the internet. RadSec provides confidentiality, integrity, and authentication for
RADIUS traffic between clients and servers which may not be within a single secure network. In the
case of a school district that wants to ensure the security of messages sent between RADIUS clients
and servers over potentially insecure networks, RadSec would be the appropriate choice.
