Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deal with clock skew #141

Open
jyasskin opened this issue Mar 7, 2018 · 1 comment
Open

Deal with clock skew #141

jyasskin opened this issue Mar 7, 2018 · 1 comment
Labels
help wanted Community members should chime in with your opinions.

Comments

@jyasskin
Copy link
Member

jyasskin commented Mar 7, 2018

Our strictness in enforcing being within the 7-day signature validity period interacts badly with skewed clocks. Do we want to encourage signers to pre-date the signature's timestamp by X hours, or require clients to trust signatures that start being valid in X hours, or something else?
@jyasskin jyasskin mentioned this issue Aug 7, 2018
Merged
@jyasskin jyasskin added the help wanted Community members should chime in with your opinions. label May 13, 2019
@jyasskin
Copy link
Member Author

The spec currently says to deal with clock skew in a particular way, but it's not obvious that's correct.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
help wanted Community members should chime in with your opinions.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jyasskin