Re: SOI QUESTIONS: 2.5 Plausible deniability

["Housley, Russ" <rhousley@rsasecurity.com>]

At 1:03 PM -0400 6/20/02, Theodore Ts'o wrote:
>Please discuss and answer this question.....  (for more discussion and a
>clear definition of "plausible denaibility", please see section 2.5 of
>the soi-features I-D).
>
>2.5)  Plausible denaibility
>
>2.5.A) Does SOI need to provide "plausible deniability" (the opposite
>of "non-repudiation") for the initiator?
>
>
>2.5.B) Does SOI need to provide "plausible deniability" (the opposite
>of "non-repudiation") for the responder?

Non-repudiation is a service that is normally associated with the 
application layer.  So, this characterization is not quite right, but I 
think we all get the point.

The only IPsec issue seems to be private key operations that are 
subsequently used to prove the participation of a particular party in the 
symmetric key management exchange. I do not think that we should expend any 
effort (and certainly we should not add complexity) to provide "plausible 
deniability" for either party.

Russ