Since a person's public key is guaranteed unique (or there's a serious flaw
in the key generation algorithm), I fail to see why the DN portion of the
[DN,key] pair needs to be unique.
How would I look you up in the X.500 directory if your DN was the same as
someone elses (a concept with a meaning of which I'm unsure)? Say I wish
to retrieve your public key so that I may encrypt something for you alone.
I'd sure like to be able to find you by some means. The reason that I brought
the issue of alignment is that if we are going to use X.500 directories for
PEM purposes in the future, we need the DNs to be the same (or very close)
so that there isn't a need to change DNs later. Does this make sense? Did
I miss something in your argument?
-Peter