Matt Stevens

@mattstevens @tapbot_paul Does that apply to the Mac App Store? It's not mentioned in Apple's sample code.

@mjtsai @mattstevens two totally diff dates.

@tapbot_paul @mjtsai It’s like a code signing timestamp. If the signing certificate is trusted, you check if it was valid at signing time.

@mattstevens So if you don't check it, it won't falsely cause validation to fail?

@mjtsai You check the creation date (when the cert was used) against the certificate’s validity period, vs checking the current time.

@mjtsai So if the certificate is trusted and was valid at the time it was used you don’t care if it is expired.

@mattstevens Right. My question is, does Apple's sample code implicitly use the current date? (Guess: No. So this wouldn't be a problem.)

@mjtsai Looks like no and you’re right, it’s not an issue if you don’t check the validity period at all.