Comment by lukeh
4 years ago
OK, perhaps hierarchical wasn't the correct word; it's not hierarchical in the sense of reflecting a (possibly global) domain hierarchy, but it does consist a component that identifies the issuing authority, and a component that identifies the principal relative to that authority.
So yes, a (UUID, RID) tuple would have worked just as well.
Hierarchical was correct. I think the intention must have been to have a registry. Clearly a registry didn't happen :/
Well, whilst they are hierarchical they’re really only used as unique authority identifier plus local identifier.