Words / Pair 36 of 41
The same clean result, months apart
Nothing in a signed block tells you when it was written or whether it still stands. Reusing a true old notice is the ordinary way a signature gets turned against a reader.
Signatures do not carry a clock
Genuine, and overtaken by events
Written by the key holder, correctly signed, and true on the day it was made. Since then the addresses in it may have been retired or the offer withdrawn. Nothing in the block ages, so it presents itself exactly as it did on day one.
Genuine, and still standing
Also written by the key holder, also correctly signed, and describing the position as it is now. From the outside the two are the same object. What differs sits in the world, not in the file.
A signed block is a fixed run of characters. Copy it anywhere, a month later or a year later, and it verifies just as well. That portability is the whole point of signing, and it is also the reason a reposted statement is such a comfortable thing to hide behind.
Any time your software shows alongside the signature was supplied by the machine that made the signature. It was typed in by the same side you are trying to check, so it is a claim rather than a measurement. Treat it as part of the message, not as evidence about the message.
Where the confusion starts
Almost nobody forges signatures. They do not have to. An old statement that was true when written is far easier to work with, and it comes pre-verified. Somebody lifts it, drops it into a new place beside a fresh sentence of their own, and the reader checks the block, sees it pass, and carries the confidence over to the fresh sentence that was never signed by anyone.
- A statement that lists addresses, reposted after those addresses were withdrawn.
- A statement about a policy, quoted long after the policy changed.
- A statement that answered a question nobody is asking now, presented as an answer to today one.
- A statement with a real date in it, reposted with the date paragraph trimmed off.
There is a decent way to anchor yourself and it does not involve trusting anybody. A statement that refers to something you know happened recently cannot have been written before that thing happened. Read the text for those hooks. A mention of a change you lived through, a reference to a policy you know arrived in the spring, a number that only makes sense after a certain point. None of that is proof of freshness, but it does put a floor under the age of the words, and a floor is more than you had.
Reading the date the signer wrote
Find a date inside the signed text
The only date worth anything is one the signer typed inside the signed region, so read the text itself rather than anything around it.
- Read the signed text from the header line to the footer line and look for a date, a month, or a numbered notice the signer wrote in themselves.
- Check that the date is inside those boundaries and not in the post that carries the block. Anything outside was written by whoever reposted it.
- Weigh the date against what you know changed since. A statement dated before a change you are aware of cannot be describing the position after it.
If no date sits inside the text, the statement is undated for good and there is no reading of it that makes it fresh. That is not a fault in your checking. It is a fault in the statement, and the honest handling is to treat it as saying only what it says, with no bearing on today.
Which way round hurts more
- If you treat a current statement as old
- You ignore a real notice and keep using something the operator has moved on from. You may find out slowly, through an order that goes nowhere. Recoverable, mostly.
- If you treat an old statement as current
- You act on a position that was abandoned. If the statement named a payment destination, you have just sent money somewhere nobody is collecting from, or somewhere the wrong person is.
- If it is old
- Set it aside as history and stop drawing conclusions from it. If you need the present position, ask the operator through a channel you already use and wait for something dated.
- If it is current
- Use it, and note the date somewhere you will see it again. A statement you accepted in March is an old statement by June, without changing a character.
Questions readers send about this pair
Does a signature expire?
A key can carry an expiry and a signature can be checked against it, but the statement itself does not expire. Text that verified last year will verify next year. Freshness is a separate matter and only the signer can put it in writing.
Someone posted a signed message today. Does that make it today message?
No. The posting is today. The writing could be from any time, and the poster need not be the writer at all. Look inside the signed region for a date.
What if the operator never dates anything?
Then no statement of theirs can be aged from the outside, and you should treat every one of them as saying nothing about the current position. Asking for a dated line is reasonable and costs you nothing.