pem-dev
[Top] [All Lists]

Re: DN/EN pairs

1994-02-07 08:41:00
Steve Crocker writes ...

Proposed: Certificates be modified to provide two forms of
identification, the distinguished name (DN) as its presently defined,
*and* an email name (EN) directly usable as the network address
associated with the same entity.

Synopsis of argument: Both are needed.  Attempts to make one or the
other the primary form lead to potential security flaws.


Steve

Why is my email address associated with my keying material ?

Both are not needed.  You don't need my IP address "bound" to my
RFC-822 domain name address !  (Try jlowry(_at_)bbn(_dot_)com (128.89.4.237))

I also don't see the potential security flaw.  Please support this
statement.

John Lowry



<Prev in Thread] Current Thread [Next in Thread>