Security Basics mailing list archives

Re: CERTIFICATE


From: PCSC Information Services <info () pcsage biz>
Date: Mon, 28 Jan 2008 13:07:46 -0500

Anonymous,

Certificate expiry dates serve a couple of functions. One, it allows a Certificate Vendor i.e. Verisign, Thawte et al to provide their services of validating a certificate for a certain period of time, usually one year. Secondly, an expired certificate is deemed untrustworthy. If a user still accepts this certificate despite its expiry traffic should still flow encrypted.

We are legion...

fnar


On 28-Jan-08, at 2:27 AM, anon () yahoo com wrote:

could someone tell me what would happen to encrypted traffic if you have an expired certificate?? Does the traffic flow in clear text henceforth?? or just that the credebility of traffic from that source cannot be accounted for??


Current thread: