Re: [IETF-PKIX] Multiple certificates for same key?

[Mark Shuttleworth <marks@xxxxxxxxxx>]

> Let's get this straight -- the key is the identity,
> your name is a handle.  If liberty means anything, you
> can call yourself what you want hence identity-to-handle
> mapping will be many to many.  The tradeoff is your
> complexity eval of managing O(10**2) keys versus your
> exposure eval of published cross correlation of the key
> sharing amongst certs.

Gotta disagree.  The name is your identity (and potentially your
authority).  The key is merely a way to tie an action (signature) to that
identity.  The problem is tht one-key-many-certs can mean that an action
is tied to multiple identities.  It's not a huge problem.

--
Mark Shuttleworth
Thawte Consulting