Re: [xri] CanonicalID in XrdOne/TrustWorkflowByExample

[Brian Eaton <beaton@google.com>]

Hi Nat -

On Tue, Dec 9, 2008 at 11:22 PM, Nat Sakimura <n-sakimura@nri.co.jp> wrote:
> I am breaking up the threads into relevant topics.
>
> I think the CanonicalID should be a Cool URI (or persistent XRI), and
> not just a regular URI (Domain name).
> It is the CA's reponsibility that this Cool URI will never be reassigned
> to another Subject.

I don't understand this proposal at all.  Certificate Authorities
don't assign URIs.  They issue certs.  Can you explain what you mean
about CA responsibility to prevent reassignment of URIs?