XCFramework codesigning - expired identity behaviour

Xcode 15 introduces a feature where you can see if an XCFramework is signed - (see here)

What is the behaviour when the identity expires? For example, do the app developers who have integrated the XCFramework require a brand new XCFramework which is signed with a new, valid identity? Or is there a way to address the expiration without any action from the app developers at all?

Replies

What is the behaviour when the identity expires?

My understanding is that this follows the same path as Developer ID signed apps on macOS: The signature includes a secure timestamp and we only require that the identity was valid at the time that it was signed.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"