Hello everybody,
I use Outlook 2010 and have a lot of files that were digitally signed with S/MIME. The signature was valid at the time the message was created. Now, a year later the certificate used to sign the messages has expired. When I now look at theses mesages in Outlook 2010 I get a warning message that the signature is invalid.
Well, no, it is not. The signature is perfectly valid because the certificate was valid when the message was signed.
Outlook obviously uses the date and time of the moment when I look at the message to assess the validity of the signature. This is wrong. The correct method is to use the date and time of the moment when the message was created to assess the validity.
How can I bring this obviously wrong implementation to the attention of someone from Microsoft?
Regards,
Frank