William H. Geiger III wrote:
:). Signatures on a blankID could be used to provide authority and
would not be affected by changes to other userID's.
These blank IDs are exactly what I was referring to in the previous
emails (tag-centric). On other mailing lists they have been discussed as
"meta-IDs", "meta-certs" (although that name has now been usurped by
another technology) and more typically "guids". :-)
In any case, William is correct, MIDs solve both the classic naming and
revocation problems inherent in many PKIs. In fact, some companies have
built their entire product infrastructures on this notion :-)
I think Jon is also in agreement here...
--
Pat Richard - patr(_at_)xcert(_dot_)com
Public Key Available via LDAP
http://www.xcert.com
"Every information object known to modern man is a candidate for
PKI-based ACL" - Young Etheridge