Is `integrated_time` required if `inclusion_promiseis` present?

**Description**



Is `integrated_time` required if `inclusion_promise` is present?
- https://github.com/sigstore/protobuf-specs/blob/ef40dfbbd35e6efd3c6151e7d24da73f6382e579/protos/sigstore_rekor.proto#L103-L106

To extend a bit more:

**Regardless of whether an rf3163 timestamp is present or not**, if `inclusion_promise` is present, then must I check that the `integrated_time` exists and is within the validity period of the signing certificate?

Related: 
 - https://github.com/sigstore/architecture-docs/issues/16
 - https://github.com/sigstore/sigstore-python/issues/1380
 - https://github.com/sigstore/sigstore-python/pull/1381

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions