[ Thanks to Scott for this link.
“Public Key Infrastructure (PKI) has been reviewed as a
technical infrastructure by a number of security experts. In this
paper we look at a number of pratical organizational issues that
pure PKI suppliers often fail to mention.
“Identification is inflexible–in my enterprise people move from
one job to another and one location to another on a regular basis,
but the PKI certificate is just inflexible unless I miss most of
the stuff that would be useful in our internal directory…”