4 ms·
The latter. Code signing relies on a timestamping service to certify that the signature was made within the certificate's lifetime.
by marcan_42 5y ago
The latter. Code signing relies on a timestamping service to certify that the signature was made within the certificate's lifetime.
- zinekeller 5y agoThat assumes that the time-stamping certificate isn't revoked (not expired, revoked). Code signing is a mess.
- corty 5y agoSame problem as for document signatures, one needs a trustworthy timestamping service certifying the time of signature, so the client may check if the whole certificate chain might have been valid at the time. This means that you need far more extensive CA and revocation databases than for TLS, because you need to keep all that historical data.