[IETF-PKIX] Certificate Directories and Spam

[Hal Lockhart <hal@xxxxxxxxxxx>]

Sorry if this is not appropriate for this list, but I was just wondering
(as I clear the daily load of garbage from my inbox) if anybody has thought
about this?

It seems to me that publicly accessible directories with certificates in
them, especially those with email addresses conveniently located in the
subjectAltName field will provide an irresistible source of targets to
Spammers.  The reason for raising this issue on this list, is that it seems
to me that if this does happen it could greatly retard the deployment and
acceptance of an Internet PKI.

Comments anyone?

Hal

=================================================================
Harold W. Lockhart Jr.            Platinum Solutions Inc.
Chief Technical Architect         8 New England Executive Park
Email: hal@platsol.com            Burlington, MA 01803 USA
Voice: (781)273-6406              Fax: (781)229-2969
=================================================================