Re: [IETF-PKIX] RFC 822 names in SubjectAltName and other extensions

[Peter Lipp <plipp@xxxxxxxxxxxxxxxxxx>]

>And I think pretending that a bare email address is verified
>and belongs to the named user is quite an opportunity for confusion.

Agreed. Obviously it might be the case that the comment field can be verified
and the email-adress not.

What I'd like to see is that the full SubjectAltName is verified, i.e. if
it contains a comment that this also is verified - or it's non-verified, then
both parts are not verified. The CPS specifies which way a CA does it.
Mixed-mode seems to be a good source of confusion, and while of course
specifyable in the CPS, I'd rather avoid it.

Peter