Re: SOI QUESTIONS: 2.1 Identity protection questions?

[Paul Hoffman / VPNC <paul.hoffman@vpnc.org>]

In the typical VPN scenario (either gateway-to-gateway or remote-access WAN):

- protection against passive attacks on the identities of each party 
is very important because you don't know who is going to initiate

- protection against active attacks against the identity of either 
party is useful, but not nearly as important as protection from 
passive attacks

- if a protocol can offer protection against active attack for only 
one of the two parties, protecting the identity of the responder is 
more important to prevent wandering identity sniffers

--Paul Hoffman, Director
--VPN Consortium