Re: X.509 certificate and its subject name field

[Stephen Kent <kent@xxxxxxx>]

Shyh-Wei Luan,

	A driver's license number would be a fine DN component for a state
issuing the cert equivalent of licenses; it need not be put in the Sub UID
field.  Look at the SET spec and note how they handled this issue based on
credit card numbers.

	Still, the issue is that an arbitrary Subject UID value makes for a
terrible ACL entry, by itself.  It creates a tremendous opportunity for
management errors, as one cannot look at the ACL entry to figure out who is
authorized to do what.  Instead, one must go through a (trusted) mapping
form Subject UID to Subject name.  That is the point several of us have
been making.

Steve