Steve,
If the only requirement for names in certificates was
uniqueness, then I would agree with your observation (made in previous
posting as well) that public keys would suffice. However, that is not
the sole requirement for these names and thus the discussions we have
had are relevant and necessary.
I wasn't trying to say that all the certification work is unnecessary.
What has bothered me is the occasional thread which has broken the problem
down into:
first: get unique DNs
then: do the rest of the work
It's the unique DN step which I consider an unnecessary complication. If
you look at the solutions I suggested to the first non-uniqueness problem,
there's a kind of certification involved. It's just that DNs aren't
required.
- Carl