Vint,
I think all three cases are readily accommodated uder the
proposed scheme. I would expect BBN to register as an organizational
CA under a PCA, e.g., the high assurance PCA RSADSI has said it will
offer. My certificate as a BBN employee would reflect this
organizational affiliation, e.g., it might be C=US, SP=MA,
L=Cambridge, O=Bolt, Beranek and Newman, OU=Communications Division,
CN = Stephen T. Kent. As a redisdential user I would register with a
residential CA, e.g., one for MA, under the residential PCA which
RSADSI provided details for at the Santa Fe meeting. My DN there
might be C=US, SP=MA, L=Boxborough, CN= Stephen T. Kent, postalCode =
01719-1900 (RSADSI has suggested it might use 9 digit zips if people
are concerned about including street addresses in residential DNs).
As a consultant operating out of my home, I would hope to register as
a very small organization (just me), with a PCA that doesn't charge
much and doesn't require a lot of legal paperwork, e.g., the mid-level
assurance PCA Jeff Schiller described at the Santa Fe meeting. Here
my DN might be C=US, SP=MA, L=Boxborough, O=STK Associates, CN=Stephen
T. Kent, with my conslutancy's DN being the relative DN minus the CN.
Next question.
Steve