Adds a wsu:Timestamp (Created/Expires) to the wsse:Security header, giving a signature a freshness window to defend against message replay. On its own it defends against nothing: list it before a signature that references it with by: TIMESTAMP, so the window itself is covered and cannot be rewritten in transit.
Syntax
timestamp: ttl: <string>
timestamp:
ttl: <string>
Attributes
Name
Required
Default
Description
Examples
ttl
false
PT5M
How long the timestamp stays fresh, i.e. Expires minus Created, as an ISO-8601 duration. A validating signature with a required TIMESTAMP reference rejects messages outside this window.