2 ms·
As noted, in practice, without additional info, there's no way to tell when a signature was created and so all signatures die when the signing cert expires. Th
by tedunangst 8y ago
As noted, in practice, without additional info, there's no way to tell when a signature was created and so all signatures die when the signing cert expires.
That said, existing signatures that have already been verified, for existing extensions, should still be trusted.
- bo1024 8y agoYeah, this response is a bit strange because if I trust my own system's clock, I just have to remember for each signature when I first saw it.