Long-Term Validation

A signature is only as checkable as the revocation data behind it. OCSP responders get retired and CRLs stop being published, so a document that has to verify years from now carries that data itself, in the document security store (DSS). These guides fetch it with model.NewLTV and write it into the file, in the signing revision or in a later one.

Validation reads it back with RevocationCheckOffline, without touching the network. See Validating Signer Trust and Revocation.

The examples are in signatures/ltv, with a README that explains the DSS layout in more detail.