2017-08-22 UTC
# 
sknebel e.g. signed executables generally have to have not only a a signature, but only a signed timestamp proving *when* they were signed (which really just is the person creating the binary going to a trusted authority and saying "here is a signature I'm attaching to my file, could you please sign a statement saying when you've seen it", which is then attached to the file as well)