Forum Discussion

Tim Mangan's avatar
Tim Mangan
MVP
Mar 22, 2019
Solved

About Code Signing and Timestamps

Code Singing certificates may include a url for a timestampling service.  This is known to be used by browsers when evaluating the certificate, and allows the following: Developer signs the code ...
  • Chaitanya Donthini's avatar
    Chaitanya Donthini
    Apr 04, 2019

    Tim Mangan 

    1. App Installer app doesn't deal with certs all that much. App Installer is a wrapper that calls the deployment platform APIs. And yes, Deployment Platform APIs do check the timestamping URL. 

    2. Yes, we check the timestamp if its there. 

    3. Yes, lifetime signing EKUs are accepted. 

     

    Thanks,

    Chaitanya

Chaitanya Donthini's avatar
Chaitanya Donthini
Former Employee
Apr 04, 2019

Tim Mangan 

1. App Installer app doesn't deal with certs all that much. App Installer is a wrapper that calls the deployment platform APIs. And yes, Deployment Platform APIs do check the timestamping URL. 

2. Yes, we check the timestamp if its there. 

3. Yes, lifetime signing EKUs are accepted. 

 

Thanks,

Chaitanya

Resources