Hacker News new | ask | show | jobs
by Const-me 3335 days ago
Depends.

If it’s contaminated ‘coz expired, it’s doable. Many devices have accurate real-time clocks even offline, e.g. GPS. It’s easy to include the expiry date in that cryptographically-signed data. BTW, Kerberos protocol does similar things with their timestamps.

If however it’s contaminated just because the producer decided to recall a batch of their product, then yes, a centralized server is a good choice.