Re: [IETF-PKIX] Cryptographic binding of certificates to signatures

["Brian M. Thomas" <bt0008@xxxxxxxxxxxxxxx>]

David Kemp wrote:
> I look at it somewhat differently.  Issuing a single certificate
> per key provides the cryptographic binding between the signature
> and the certificate; proposals to share keys between certificates
> reduce that to a binding between the signature and the union of
> all certificates which share the key.
>

Unless I really misunderstand you here, I must say that this is simply
false.  *Proof* of the issuance of a single certificate per key could
provide the cryptographic binding of signature to certificate; I invite
the cryptographers to show me how this could be accomplished.

What am I missing?

brian