What is a use case for implementing RadSec instead of RADIUS?

RadSec (RADIUS over TLS) is a protocol for transporting RADIUS messages over TLS-encrypted TCP/IP

networks. The primary use case for implementing RadSec instead of traditional RADIUS is to protect

RADIUS communications, particularly when those messages must travel across an untrusted

network, such as the internet. RadSec provides confidentiality, integrity, and authentication for

RADIUS traffic between clients and servers which may not be within a single secure network. In the

case of a school district that wants to ensure the security of messages sent between RADIUS clients

and servers over potentially insecure networks, RadSec would be the appropriate choice.