Rhys,
I like your proposal! It will be interesting to see if there's any
groundswell of support. As it turns out, I lobbied for an almost
identical scheme inside our group several months ago and couldn't get
anyone else to sign up for it; the strong preference was for unparsed
email names, e.g. EN = crocker(_at_)tis(_dot_)com(_dot_)
Your hack for handling the top level is interesting. Subject to
coordination with the pwoers that be in teh DNS community to make sure
we understand where DNS names are headed, your scheme looks
reasonable.
The only suggestion I'd make is to make sure there's a way to
correctly reconstruct names with "%" or any other e-mail address
oddities. We might need to use additional OIDs as stand-ins for "%"
or something. Maybe everything to the left of the "@" can be left
unparsed. (Is it guaranteed there's always exaqctly one "@"? I have
the impression that mail addresses can somet8imes have two "@".)
Steve
P.S. One enormous value of your proposal is that it does indeed fit
into the usual rules of name subordination and hierarchical
certification. This is a big win.