I too would be interested to hear what that community thinks. I've seen this similar situations where large organizations released signed software that was expired. I just got my security+ and gained a better understanding of certificates, but what do you do when it's certificate is expired but not revoked? Is it acceptable to assume the developers made a mistake? -----Original Message----- From: Jessie Parada <[email protected]> Sender: [email protected] Date: Tue, 12 Jun 2012 15:56:33 To: <[email protected]> Reply-To: PaulDotCom Security Weekly Mailing List <[email protected]> Subject: [Pauldotcom] apple cert question (JP)
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
