[doctorbug]

You're right. So to give you more insight, a Woleet signature proof uses timestamping to prove that the signature was actually generated BEFORE the timestamp date.

Note that the data being signed is made of the hash of the signed file concatenated with the hash of the signer identify (an X500 identity as entered by the signature requester and accepted by the signer).

Timestamping is also used in Woleet Sign to prove that the audit trail of a signature request (ie. the list of events of the signature workflows) was generated BEFORE a given date.