Signature policies

Signature policies are a set of rules and properties that govern the creation and validation of digital signatures. PKI SDK has policies already configured for use in signers and validators, and it is also simple to create your own policy or customize an existing one.

When the policy of a signature being validated is not given by the user, cannot be inferred from the signature data, or is incomplete, validators and arbitrators may reach incorrect validation results. Explicit or implicit signature policies are therefore essential for data consistency, both when signing and when validating.

See the following articles for more information:

• Policy mappers
• ICP-Brasil policies
• AD-RT signature lifecycle
• Customizing policies
• Policies with references but no values
• Policies with a grace period