Steve,
Now I'm really confused. I didn't think we were talking about
inclusion of an address in a certificate impling affiliation, but
rather whether inclusion of an organization's name in a certificate
implies an affiliation. X.521 identifies object classes for
residential and organizational persons, organizations, etc. The
accompanying text makes it clear that an organizational user is, in
some way, affiliated with the organization which is idenitified as one
of the attributes in that object class (and, presumably, the user's
DN). The text also makes it clear that a residential user belongs to
a distinct object class, with no organizational attributes, and that
the intent of that object class is to represent users who are not
claiming an organizational affiliation through this type of directory
entry. I think it behooves us to issue certificates which are
consistent with the specified syntax and semantics for directory DNs,
inlcuding these base object classes, to minimize disruption in
anticipation of directory serviecs become widely available.
Steve