Re: DNS under o=Internet

[[e-mail]]

> Perhaps I mis-understand the nature of the discussion, but to calm
> a few fears I have, could people discussing o=Internet please show
> me how Internet-registered people lying under the 2-letter countrycode
> forms of name will exist in the DIT. 

In what I call the 'civil namespace'. Assuming an appropriate naming
scheme under c=AU, I think you should be listed with a DN like

	c=AU@o=UQ@ou=CC@cn=George Michaelson

> Do you really intend to register "me" under my Internet domain name as:
> 
> 	@o=Internet@c=AU@o=UQ@ou=CC@cn=George Michaelson

No. So far we've only been talking about grafting the DNS tree under
o=Internet. I believe that sometime in the future, we need to decide
what can and cannot go under o=Internet. I'd argue that duplicating
the civil namespace underneath o=Internet is not very useful,
and that we should 'reserve' o=Internet for the infrastructure of
the Internet (the DNS, the Internet CAs etc.)

> Because I can forsee a LOT of problems with making user-agents, let alone
> people work out that [e-mail] is not matched under the @c=AU rooted
> tree.

Ideally, what you would do is:

	- match cc.uq.oz.au under the DNS tree
	- use the associatedName attributes of the
	  entries in the DNS tree to find the associated
	  organization.
	- search for mail=ggm in the subtree under the
	  organization (or organizational unit) named in
	  the appropriate associatedName attribute

(all this assuming we use RFC 1279)


Wengyik