mozilla/browserid — Issue #646: verifier isn't respecting expiration field
Author: lloyd
Created: 2011-11-23 21:57:47+00:00
State: open
Labels: ★★★★

expired assertions are considered valid up to two minutes after they expire. Test which demonstrates the problem here: 11be199ba202a5cd9e833e57606e8066da476d06