Questions tagged [expiration-date]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
25 views

How to generate an expired key with gpg?

For testing purposes, I need a PGP key for a specific uid that has already expired. Using gpg --full-generate-key only gives me the following options: Please specify how long the key should be valid. ...
user avatar
  • 319
1 vote
1 answer
243 views

Can I change expiration date of a gpg key I've already sent to a key server?

ArchLinux wiki page on GnuPG reads Once a key has been submitted to a keyserver, it cannot be deleted from the server. Does that mean that also the expiration date with which I published the key via ...
user avatar
  • 153
0 votes
1 answer
350 views

Best practice for encrypting data on Mifare

I am currently playing around with Mifare Classic 1k. And everything I have read about it's security is true. So it's not exactly the best thing to use to avoid cloning. But I was wondering if someone ...
user avatar
3 votes
1 answer
170 views

Why does Windows consider a certificate valid even after its expiration time?

I downloaded Google's Cloud SDK installer today, and upon checking the certificate to validate it, I noticed something strange: the expiration date of the certificate appears to be December 22nd 2019 -...
user avatar
  • 33
1 vote
1 answer
1k views

Request certificate expiration date in CSR

I want to see how my application will behave in case if the SSL certificate expires. CSR are signed by CA, so they are not self-signed and the validity period is 2 years. For my test I want to set ...
user avatar
  • 412
1 vote
2 answers
208 views

Do registration codes need expiry?

I work on an application where users are sent a unique registration code in the post. They use this, along with other personal information known to the user, to confirm the identity of the user upon ...
user avatar
  • 11
1 vote
0 answers
76 views

How does PGP web of trust handle certificate expiration?

I have certificate that expires in two years. I'll probably try to participate in key signing party so I get to know what it actually looks like. What happens in two years? When my certificate ...
user avatar
  • 111
3 votes
3 answers
2k views

What happens when the timestamper's certificate expires?

What happens when the timestampers certificate expires? If the code is now untrusted, can it be re-stamped without re-signing? If not, what good does this timestamp do me if my cert is valid until the ...
user avatar
4 votes
2 answers
399 views

How do short lived certificates increase security?

After reading a blog post about the new Roughtime protocol, I am not convinced of the original premise that shorter certificate lifetimes increase security. The claim is that a shorter time somehow ...
user avatar
  • 33.6k
2 votes
0 answers
1k views

What is the name of the OpenSSL date format? [closed]

The OpenSSL date format has the month first and the year after the time. Example: Mar 18 10:55:00 2017 GMT See also here: https://www.shellhacks.com/openssl-check-ssl-certificate-expiration-date/ ...
user avatar
  • 121
0 votes
3 answers
712 views

When should TouchID/Fingerprint log-in expire?

I couldn't find such a standard which mention about TouchID or fingerprint log in expiration date. Suppose I have an application and allow users to log in using the fingerprint. I would like to know ...
user avatar
  • 35
1 vote
1 answer
4k views

Why is the need to expire OTP?

OTP can be implemented either using Google Authenticator or by sending SMS to the user. The GA code is created using a timestamp and the code expires if it's used after some time. However, in case of ...
user avatar
1 vote
0 answers
156 views

Certificate revocation with reason code removeFromCRL

RFC 5280 says: "The removeFromCRL (8) reasonCode value may only appear in delta CRLs and indicates that a certificate is to be removed from a CRL because either the certificate expired or was removed ...
user avatar
3 votes
2 answers
5k views

JWT access token and refresh token

We have two applications App1 and App2. A user uses a browser to communication withe apps. App1 supports different auth. mechanisms (SSO, usr/pwd, etc.) but App2 doesn't have any access to auth data ...
user avatar
  • 129
2 votes
2 answers
2k views

How can an expired SSL certificate make the server and/or client vulnerable to MITM attacks? [duplicate]

When I see the warning on my browser about "Invalid Certificate" or "Untrusted Certificate" , I might have doubt about a MITM attack at my network. Should I have the same concern when I see that the ...
user avatar
  • 442
2 votes
1 answer
98 views

Authorization expiration without reliable clock / time

I've been looking, but I think its impossible to find a pairing solution that has the benefits of authorization expiration and renewal (like x509 cert expiry and OAuth expires_in), but that works ...
user avatar
0 votes
3 answers
164 views

Why is it allowed to change dates to absurd values in OS?

I have always considered this a bad practice, although it's true it's not a big issue because any software that depends for something important on dates is mostly gonna work using a reliable source to ...
user avatar
0 votes
2 answers
245 views

Embedding expiry dates into keys possible?

I have an app which uses an asymmetric key for encrypting/decrypting data between devices. However, these devices should no longer be able to decrypt after a certain period of time. Currently, I'm ...
user avatar
  • 355
2 votes
2 answers
509 views

Stateless secure token that can expire?

I want to generate a link that will be given to a user. On this link, as a parameter, I will add a token that will be valid only for a few days. So after that time, the server will check the token, ...
user avatar
  • 753
62 votes
6 answers
29k views

How to Securely Implement a "Remember Me" Feature?

Assuming you already have a website that implements all of the standard login stuff, what is the correct and most secure way to allow users to automatically be logged in for a certain time period (let'...
user avatar
  • 833