A communication
system (410) wherewith sources (414) and targets (416) employ a
key server (420) to exchange transactions (424). A first request to the
key server includes a source assertion (422) from an
authentication authority (418), and optionally a key (430). The
key server provides a transaction ID (428), and the key if not already provided, in reply to this request. The key
server stores the transaction ID and source assertion. The source encrypts the transaction and sends it with the transaction ID to the targets. A second request to the key
server includes a target assertion and the transaction ID. The key
server provides the key in reply to this request. The key server also stores the target assertion in association with the transaction ID. The respective assertions then establish the source and targets of the transaction in a manner that cannot plausibly be repudiated.