Skip to content

Commit

Permalink
📝 Observation.
Browse files Browse the repository at this point in the history
  • Loading branch information
@Mihara
Mihara committed Jun 24, 2023
1 parent ea03404 commit d5b474e
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -60,6 +60,10 @@ There is currently no way for us to know if a user's certificate has been revoke

Similarly, there is no way to prevent someone from using an expired certificate, since they can set the clock to what they want.

### Privacy

The certificate, as issued by LoTW, embeds the email address you used with LoTW -- I am not certain whether it is the address they had on file at the time they issued your certificate, or the address you registered with initially. While `lotw-trust` does not display this information anywhere or even access it, it's there, and anyone sufficiently crafty can extract it from the signature block of a file you signed. There is nothing I can do to prevent this.

### General caveats

I am not a cryptographer, I am a sociologist. Golang is not my best language, it's just the one that got me the result the quickest, while still allowing to easily make a cross-platform tool.
Expand Down

0 comments on commit d5b474e

Please sign in to comment.