RE: NEW Data type for certificate selection ?

[Stephen Kent <kent@xxxxxxx>]

Dwight,

Thanks for a good characterization of the underlying assumptions that have
been driving much of this discussion. I agree completely!  In a completely
open, public PKI model, it's very hard to find the "right" certificate and
I agree that this sort of PKI model is questionable for many reasons, not
just in a business context.  I'll send you a paper on the topic from last
fall, separately, that I believe you will find consistent with the views
articulated in your message.

Steve