Subject: Use of dnQualifier in QC/2459 {Re: Use of dnQualifier in the QC profile}

From: "Anders Rundgren" <[email-masked]>
Date: Fri, 12 Nov 1999 05:26:45 -0000

>Here is the latest conclusions regarding use of dnQualifier and support for
>"unique/static identifiers"
>
>1) Can dnQualifier be used as proposed (to hold a disambiguating value, which
>MAY be a unique identifier for the subject) ?

<snip>

>And if this is the case and a CA want to indicate this in the certificate, then
>the way to do it is to assign an attribute semantics OID in the qcStatements
>extension, defining this semantic property.

<snip>

>These solutions reflects the consensus I have experienced from many discussions
>this week, including discussions with the authors of RFC 2459.

Stefan,
Does this indicate that the authors of RFC 2459 believe that this issue is entirely QC-specific?

I think this conclusion is utterly wrong.   Vitnessed by for example VeriSign's/Execellerate's DUNS certificates.

This short-term solution works but does not solve the problem which is actually is buried in RFC2459.

Anders