RE: [xacml] Structured names]

My problem with Bill's suggestion is that his matching syntax is not standard.  We would need to spell out all sorts of things about e-mail names to fully specify "our" matching algorithm.  I think the way I specified "rfc822Name-match" is good, and makes use of all the existing standards.  I think "*-equal" should be understood as matching just the one name being referenced.  I think "*-match" can match a hierarchy. We should define a "*-match" function for any hierarchical subject name type.  We have done this for rfc822Name, x500Name, and even for xs:string (via regexp).  Are there other hierarchical name types we are concerned about at this point?  Anne

--
Anne H. Anderson
Email: 
Sun Microsystems Laboratories 1 Network Drive,UBUR02-311
Tel: 781/442-0928
Burlington, MA 01803-0902 USA
Fax: 781/442-1692