Citizenship of multi--national company employees (Was: RE:Multi-national company listing issues)

["Bob Jueneman" <BJUENEMAN@xxxxxxxxxx>]

Hmm. Let's see.

I've got a  "gastarbeiter" (temporary worker) working for Daimler-Chrysler
(who must have an incredible headache trying to sort out all of these
issues) who is working in Munich but who lives across the border in Austria
where houses are cheaper.

This worker's mother was Czechoslovakian and his father a citizen of the 
Georgian Republic of the old USSR, but he happened to
have been born in the UK while they were in school, after which they 
moved to Turkey. And just for the sake of argument lets say that the 
laws are such that he could claim citizenship in all three countries. 
But because he is an Orthodox Jew, he could also claim to be an Israeli
citizen. Unfortunately, he was drafted into the Turkish army, and as a result
effectively renounced his citizenship in the other countries at least as 
far as they were concerned.

Now, of course, Czechoslovakia no longer exists, so he is a stateless person until
he goes through the immigration process and becomes naturalized somewhere,
if he ever does.

Now tell me again what this has to do with his Distinguished Name?

My point is that citizenship is a (potentially multi-valued) attribute of a person,
and as a result is not well suited to being a name qualifier.

So "country=" should NOT imply citizenship.  Nor should it imply country-in-which-
an-organization-is-incorporated, nor a number of other things, either.

Country should be a qualifier for "stateOrProvince" or locality, exclusively.  If 
someone wants to know some other interesting fact, such as citizenship,
they should INVENT A NEW ATTRIBUTE, and not overburden the semantics 
of existing ones.

And generally, such interesting facts have relatively little reason to be in the DN.
It's arguable whether they should even be in the certificate. countryOfResidence
might make some sense, if you want to know where to send the sheriff to arrest
someone who defrauded you with his digital signature.

<Rant Off> :-)

Regards,

Bob


>>> "Flanigan, Bill" <flanigab@ncr.disa.mil> 08/27/99 06:04AM >>>
Bob,

	What about citizenship?  Where might it go?  Just in the DN?  So
that it can be
automated (and standard)?

Bill

> ----------
> From: 	Bob Jueneman[SMTP:BJUENEMAN@novell.com] 
> Sent: 	Thursday, August 26, 1999 9:29 PM
> To: 	pgut001@cs.auckland.ac.nz; David.Sweigert@GSC.GTE.Com;
> rgm-sec@htt-consult.com; ietf-pkix@imc.org;
> Alan.Lloyd@OpenDirectory.com.au; ambarish@valicert.com 
> Subject: 	Multi-national company listing issues
> 
[snip]

> 3. Specify anything else you think might be useful to put in the
> certificate 
> in subjectAlternateNames, including e-mail names, organizational 
> names, etc., whether they are mapped to your directory or not.  Then
> specify
> aliases or whatever other database construct works in your directory
> to facilitate looking up entities by those names as required..
> 
[snip]

> Bob
> 
[snip]