Template:Gpg signature timestamp

From Kicksecure
Jump to navigation Jump to search

warning Remember to check the GPG signature timestamp. For instance, if you previously saw a signature from 2023 and now see one from 2022, this could indicate a potential rollback (downgrade) or indefinite freeze attack.[1]

  1. As defined by TUF: Attacks and Weaknesses: