TOFU, OK, but even with an expired certificate?

> With a self-signed certificate the date is just a setting that the
> certificate issuer can set arbitrarily

Then server owners can set an expiration date in the far future. If
they set a close expiration date, then they are expecting it to
expire.

---

Previous in thread (3 of 5): 🗣️ Björn Wärmedal (bjorn.warmedal (a) gmail.com)

Next in thread (5 of 5): 🗣️ colecmac (a) protonmail.com (colecmac (a) protonmail.com)

View entire thread.