[openssl-users] in the department of "ain't no perfect"
lear at ofcourseimright.com
Wed Jan 16 12:22:53 UTC 2019
On 16.01.19 12:27, Hubert Kario wrote:
> For maintaining signatures that need to be valid long into the future
> standards like CAdES should be used. They keep time of signing in timestamps
> signed by trusted time-stamping authorities, along with the rest of revocation
> data necessary to verify the original signature.
Understood. At this point in the maturity cycle of the technology,
we're just not there yet. My choices are, have people ignore invalid
signatures in their entirety or provide something more nuanced for now.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 488 bytes
Desc: OpenPGP digital signature
More information about the openssl-users