3 ms·
That's a pretty good idea, and would also mitigate clients with slow clocks rejecting a certificate for not being valid yet.
by agwa 3y ago
That's a pretty good idea, and would also mitigate clients with slow clocks rejecting a certificate for not being valid yet.
- toast0 3y agoOr clients with poor handling of dates. It's been a while, but Nokia Series 40 was really bad at this. As I recall, it would read the not-before as if the time was specified in local time. So not before noon UTC becomes not before noon wherever you are, so better wait a while for users in the americas.