RE: Cert Attributes in CERTDIST

Jim:

I must agree with many of the points that Dave Kemp made.  Is it worth 
putting multiple copies of the same certificate into the Directory?  This 
can lean to inconsistincies.
Maybe it would be better to follow the PKIX LDAP Schema and add an 
S/MIME-specific attribute too the directory entry.  The binding you seek 
could be achieved by putting a reference to a specific certificate that is 
available in the userCertificate attribute inside the S/MIME-specific 
attribute.
Thoughts?

Russ