Signature Validation
Objective:
ValidateConfirm that digital signatures are authentic (made by the authenticityright person) and integritythat ofthe digitalsigned signatures,document includinghas not been changed. This includes Long-Term Validation (LTV) orand Time-time-based validity.
Guidelines:
ImplementBuild validationmechanismsintotoyourverifysystem so that every digitalsignaturessignature is verified against trusted certificates.- Enable Long-Term Validation (LTV)
in your EDS to ensureso that signaturesremaincanvalidstill be verified even after the signing certificate expires. In case limited time validity is applied, the system should be able to check the signature validity type, and provide an understandable message to the user in case the signature validity time is exceeded.