Policy-Discussion

[Ian G <iang AT systemics.com>]

Duane wrote:
> Sven Anderson wrote:
>
> > But for what do you need a higher uniqueness than that of the data in
> > certificates?
>
> Because the certificate identifies an entity, not the other way round,
> since an entity can have multiple certificates for multiple things.


The certificate names an entity.  That entity name can have 
clashes.  There can be many John Smiths born every day, 
although less these days.

My point was that if ever there were two John Smiths issued 
by CAcert, CAcert itself would not be fooled in the event of 
a dispute:  you would simply chase the cert serial number 
back to the account and that would provide the right "John 
Smith."

(How that effects other people is another question, but they 
have no more info anyway, without resort to DR.)

iang