Re: Support for generic authentication tokens

On Fri, Aug 10, 2012 at 5:13 PM, Mitch Zollinger <mzollinger@netflix.com> wrote:
>
> Also, as "Certificate" is only applicable to public/private keys, its
> inclusion in the Key interface seems a bit odd.

Certificates are common containers of public keys. This is why the
crypto API should have the notion of certificates, especially for
private key lookup/discovery.

Certificates don't need to be attributes of keys, but the API needs to
provide a way to look up the private key associated with a given
certificate.  This may just require us to store the public key as an
attribute of a private key.

Wan-Teh