This notation is designed to be convenient for common forms of name. This section gives a few examples of distinguished names written using this notation. An example name in which an RDN was of an unrecognized type. The following security considerations are specific to the handling of distinguished names. Disclosure Distinguished Names typically consist of descriptive information about the entries they name, which can be people, organizations, devices or other real-world objects.
Most countries have privacy laws regarding the publication of information about people.
The transformations of an AttributeValue value from its X.501 form to an LDAP string representation are not always reversible back to the same BER or DER form. Use of Other Names Attribute type names are not unique. A string representation generated with names other than those in the Section 2.3 table is ambiguous. That is, two applications may recognize the string as representing two different DNs possibly associated with two different entries. This may lead to a wide range of unexpected behaviors which can have both direct and indirect impacts upon security.