[GH-ISSUE #3159] SIG(0) verification does not check signature inception/expiration #1146

New issue

Open

opened 2026-03-16 01:43:40 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 01:43:40 +03:00

Owner

Originally created by @divergentdave on GitHub (Jul 25, 2025).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/3159

When working on #3158, I noticed that SqliteAuthority::authorized_sig0() does not access the current time to check the signature's inception and expiration times, it only verifies the signature itself. We should check if any other SIG(0) verification steps are missing.

Originally created by @divergentdave on GitHub (Jul 25, 2025). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/3159 When working on #3158, I noticed that `SqliteAuthority::authorized_sig0()` does not access the current time to check the signature's inception and expiration times, it only verifies the signature itself. We should check if any other SIG(0) verification steps are missing.