Security issue with attaching stickers and certificates
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report
On May 2, 2025, we received a DWF file that includes 2 stickers + a date and time stamp in the form of an approval.
This certificate was received from an official body that approves protection program certificates in our country.
The date on the certificate stamp appears to be May 2, 2025, the time of approval is 12:42 PM, and the name of the approver is USER.
After several months, we were surprised to discover, both we and the approving body, that the person who appears in the sticker creator and the certificate is the name of my computer (Pazit) and not the approving body (User).
Also, the date the signatures were made does not match the date of sending and the titles stated on the certificate stamp and is May 8, 2025 at 3:19 PM.
It is important to note that neither I nor anyone on my computer applied the stickers or created the certificate, nor did they make any changes to them.
So, we assume this is a bug and want to understand what could have caused it, what can be done to avoid it in the future, and whether it is even appropriate to use this software for providing official certificates since it is not optimally secured.
