<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Denis,<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 11 Feb 2019, at 16:53, denis walker <<a href="mailto:ripedenis@yahoo.co.uk" class="">ripedenis@yahoo.co.uk</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><div style="background-color: rgb(255, 255, 255); font-family: "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: 16px;" class=""><div class=""><span class="">Hi Ed</span></div><div id="yui_3_16_0_ym19_1_1549742727973_68146" class=""><span class=""><br class=""></span></div><div id="yui_3_16_0_ym19_1_1549742727973_68060" class=""><span id="yui_3_16_0_ym19_1_1549742727973_68059" class="">Thanks for following up on this. Just one question, have you taken into account time zones? If an update is signed now in Dubai it is 19:51. If the update is processed on Amsterdam time, it is 16:51. Will this update fail because it is 3 hours in the future?</span></div><div id="yui_3_16_0_ym19_1_1549742727973_68164" class=""><span id="yui_3_16_0_ym19_1_1549742727973_68059" class=""><br class=""></span></div><div id="yui_3_16_0_ym19_1_1549742727973_68147" class=""><span id="yui_3_16_0_ym19_1_1549742727973_68059" class="">cheers</span></div><div id="yui_3_16_0_ym19_1_1549742727973_68163" class=""><span id="yui_3_16_0_ym19_1_1549742727973_68059" class="">denis</span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1549742727973_68148" class=""><span id="yui_3_16_0_ym19_1_1549742727973_68059" class="">co-chair DB-WG<br class=""></span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1549742727973_68027"><br class=""></div></div></div></div></blockquote></div><br class=""><div class="">Good question. We rely on the Bouncy Castle cryptography library to provide the signing time for the message, and it does appear to take the timezone into account.</div><div class=""><br class=""></div><div class="">I tested by signing a message inside a virtual machine set to a different timezone (EST), and the signature creation time was correctly mapped to the local timezone (within a minute rather than hours).</div><div class=""><br class=""></div><div class="">The signed updates in production appear to confirm this - only 24 messages were more than 1 hour old, out of 118,183 (from October to December 2018), and none of these appeared to be offset by a multiple of hours.</div><div class=""><br class=""></div><div class="">Regards</div><div class="">Ed</div><div class=""><br class=""></div></body></html>