Hacker News Reader

But aren't you still using the certificate to validate the receipt to find out which in-app purchases have been made?

If so, wouldn't you have to validate receipts against a new certificate once the old one expires?

Once the receipts for in-app purchases are validated, they don't need to be validated again every time. It's true that people wouldn't be able to make new in-app purchases (unless we have another payment processor as a backup). But at least their app will WORK! And we'll be able to communicate to them how to refresh the certificate and be able to make in-app purchases.

Reply on news.ycombinator.com