On Mon, Nov 15, 2010 at 11:22:52AM -0500, erik quanstrom wrote:
> > > How do you map it to a local identity?
> > 
> > There's less need to, since most rights checks would be done using the key
> > directly, but eve's factotum also probably has a SPKI key, and your identity
> > can be stringified into a path of names if necessary.
> 
> in that case, what do you do with the username? do you have
> to change username if you rekey?

Hm; I wasn't thinking about rekeying.

You're free to use the path from eve's factotum, which may go via a local
naming authority, if you like.  Then the authority simply changes its view
of names in response to your rekeying and everything stays the same.

--nwf;