[kmf-discuss] DN/subjectAltName mapping to username

[Nicolas Williams]

On Thu, Dec 20, 2007 at 12:38:57PM -0500, Wyllys Ingersoll wrote:
> So, it will not be possible to do a reverse operation - given a username,
> return a certificate identifier (issuer/subj/SN).  A KMF consumer process
> could create such a mapping, but that would be something that KMF itself
> would not manage.

There will definitely have to be many certs to one user support, but one
user to one cert might be useful for some apps -- we just don't have any
yet that need it.