Problem: mismatch between certificate validity and expiration

[tomtau]

it'll be ideally verified they match / are equal to a compile-time constant

[devashishdxt]

@tomtau By verified, do you mean runtime verification or compile time verification?

[tomtau]

runtime.

one other thing is that for enclave-to-enclave communication, one can't use Utc::now(), so should be either genesis time or last block time from light client. one one needs to check "valid_from" which would indicate there are newer blocks / later time, but it wasn't fed into the enclave

[tomtau]

this can also improve the naming of struct fields