swedenconnect / technical-framework

Technical Specifications for the Swedish eID Framework
28 stars 3 forks source link

The notBefore and notAfter in SignRequestExtension should be removed #190

Open martin-lindstrom opened 1 year ago

martin-lindstrom commented 1 year ago

.. or at least made optional.

The reason is that a server (the signservice) is the one telling whether the message is too old or not. Not the client. So, first make those settings optional, and in future versions remove them.

Also, make sure that there are explicit requirements that a SignService should have a "max-age-message" setting.