3 ms·
This same behavior is how certs usually work. Stuff with expired certs just does not run after the expiration date; that's because the cert tells you what serve
by MrEldritch 7y ago
This same behavior is how certs usually work. Stuff with expired certs just does not run after the expiration date; that's because the cert tells you what server to ask for authentication, and if you have an old cert, there's no way to be sure that the original issuer is still the one in control of that domain.
- userbinator 7y agoYou're referring to things like HTTPS and contacting a remote server, and thus your reasoning there makes sense. I'm referring to traditional code signing, which I assume Firefox extensions are more similar to --- the goal being to ensure that some data has not changed since it was signed, and only the validity of the certificate at the time the data was signed is meaningful; even after the certificate expires, a signature created when it was valid still asserts that the data it signed has not changed.