Re: X.509 DN semantics

> Comments?

Using DN's to index certificates only works when you can easily map
email addresses to DN's (and vice versa).  This means a persons
certificate will, in many cases be tied to their job.

> The user's common name may or may not be the name
> that is registered with the various civil authorities, as
> in the case of a Persona certificate.

So what?  It's your right to use any name you feel like (of course what
you use it for may not be legal).  What's your point here?


brad