> Windows code signing uses a server Microsoft runs to provide this, and Mozilla would need to do the same. Nope. Actually all CAs that offer code signing cert

> Windows code signing uses a server Microsoft runs to provide this, and Mozilla would need to do the same. Nope. Actually all CAs that offer code signing certificates are required to provide timestamping service compatible with RFC 3161. These timestamping servers are usually free to use, see for example https://knowledge.digicert.com/generalinformation/INFO4231.html https://knowledge.digicert.com/generalinformation/INFO4231.h...