{"action":"created","issue":{"url":"https://api.github.com/repos/openssl/openssl/issues/1554","repository_url":"https://api.github.com/repos/openssl/openssl","labels_url":"https://api.github.com/repos/openssl/openssl/issues/1554/labels{/name}","comments_url":"https://api.github.com/repos/openssl/openssl/issues/1554/comments","events_url":"https://api.github.com/repos/openssl/openssl/issues/1554/events","html_url":"https://github.com/openssl/openssl/pull/1554","id":175779401,"number":1554,"title":"Reject SCTs with timestamps in the future","user":{"login":"RJPercival","id":1949076,"avatar_url":"https://avatars.githubusercontent.com/u/1949076?v=3","gravatar_id":"","url":"https://api.github.com/users/RJPercival","html_url":"https://github.com/RJPercival","followers_url":"https://api.github.com/users/RJPercival/followers","following_url":"https://api.github.com/users/RJPercival/following{/other_user}","gists_url":"https://api.github.com/users/RJPercival/gists{/gist_id}","starred_url":"https://api.github.com/users/RJPercival/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RJPercival/subscriptions","organizations_url":"https://api.github.com/users/RJPercival/orgs","repos_url":"https://api.github.com/users/RJPercival/repos","events_url":"https://api.github.com/users/RJPercival/events{/privacy}","received_events_url":"https://api.github.com/users/RJPercival/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":12,"created_at":"2016-09-08T15:07:37Z","updated_at":"2016-09-12T16:08:02Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openssl/openssl/pulls/1554","html_url":"https://github.com/openssl/openssl/pull/1554","diff_url":"https://github.com/openssl/openssl/pull/1554.diff","patch_url":"https://github.com/openssl/openssl/pull/1554.patch"},"body":"As per [RFC6962](https://tools.ietf.org/html/rfc6962#section-5.2), \"TLS clients MUST reject SCTs whose timestamp is in the future.\"."},"comment":{"url":"https://api.github.com/repos/openssl/openssl/issues/comments/246398740","html_url":"https://github.com/openssl/openssl/pull/1554#issuecomment-246398740","issue_url":"https://api.github.com/repos/openssl/openssl/issues/1554","id":246398740,"user":{"login":"vdukhovni","id":1107986,"avatar_url":"https://avatars.githubusercontent.com/u/1107986?v=3","gravatar_id":"","url":"https://api.github.com/users/vdukhovni","html_url":"https://github.com/vdukhovni","followers_url":"https://api.github.com/users/vdukhovni/followers","following_url":"https://api.github.com/users/vdukhovni/following{/other_user}","gists_url":"https://api.github.com/users/vdukhovni/gists{/gist_id}","starred_url":"https://api.github.com/users/vdukhovni/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vdukhovni/subscriptions","organizations_url":"https://api.github.com/users/vdukhovni/orgs","repos_url":"https://api.github.com/users/vdukhovni/repos","events_url":"https://api.github.com/users/vdukhovni/events{/privacy}","received_events_url":"https://api.github.com/users/vdukhovni/received_events","type":"User","site_admin":false},"created_at":"2016-09-12T16:08:02Z","updated_at":"2016-09-12T16:08:02Z","body":"> @RJPercival I'd like to highlight that whatever this default value is set to, it won't affect the clock drift tolerance of SCT validation for TLS connections, as they currently override the default. \r\n\r\nWell, what tolerance, if any, is used with TLS?  It should not be zero."}}
{"actor":{"display_login":"vdukhovni"}}