> * > * None of these is a "declaration" of an identity. It is a means to > * authenticate > * the request at least in my opinion. > [TF] When I sign email, I don't include an additional attribute, I just > include my certificate. How is that not a declaration of identity. You have a From: field in your e-mail, which is how a signer claims his identity in general.