[openssl-users] in the department of "ain't no perfect"

[Eliot Lear]

Hi Hubert

On 16.01.19 12:27, Hubert Kario wrote:
> For maintaining signatures that need to be valid long into the future 
> standards like CAdES should be used. They keep time of signing in timestamps 
> signed by trusted time-stamping authorities, along with the rest of revocation 
> data necessary to verify the original signature.


Understood.  At this point in the maturity cycle of the technology,
we're just not there yet.  My choices are, have people ignore invalid
signatures in their entirety or provide something more nuanced for now.

Eliot


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190116/d61b796e/attachment.sig>