Steve Crocker writes ...
Proposed: Certificates be modified to provide two forms of
identification, the distinguished name (DN) as its presently defined,
*and* an email name (EN) directly usable as the network address
associated with the same entity.
Synopsis of argument: Both are needed. Attempts to make one or the
other the primary form lead to potential security flaws.
Steve
Why is my email address associated with my keying material ?
Both are not needed. You don't need my IP address "bound" to my
RFC-822 domain name address ! (Try jlowry(_at_)bbn(_dot_)com (128.89.4.237))
I also don't see the potential security flaw. Please support this
statement.
John Lowry