Warwick,
The thread that your proposal kicked off uncovered so many
other issues that I've have lost the original context
of you caName proposal.
Was it for the case where there might be more than a PCA
and a CA in the chain before reaching the user, e.g.,
in the event of a temporary delegation of authority?
I remember that it had something to do with name
subordination and that I liked it, but I can't remember the
details.
Could you look at my suggested revison to X.509 and
comment as to how your proposal would work under
such a scheme?
Bob