• AggressivelyPassive
    link
    fedilink
    06 months ago

    I had a client whose clock was just a few milliseconds behind the server’s, but due to timezone crap one hour in the past. And the signature was valid for one hour.

    If the network just happened to be too congested, the validation failed. The next request went through just fine. Took us forever to find out.

      • AggressivelyPassive
        link
        fedilink
        06 months ago

        Epochs aren’t that simple either.

        First of all, local time can be relevant, so you have to store timezone information somewhere anyway.

        Epochs are also somewhat iffy in regards to leap years or seconds.

        And finally: write me an SQL to retrieve all entries submitted in 2022 using just epochs.

        Timezones are annoying as fuck, don’t get me wrong, but simply ignoring them isn’t a solution either.