4 ms·
Alternatively, every large CA maintains a public TSA server (time-stamping authority), because it's an integral part of the code signing framework. These are me
by eps 4y ago
Alternatively, every large CA maintains a public TSA server (time-stamping authority), because it's an integral part of the code signing framework. These are meant for high loads, so they can be used to sign each document individually.
https://en.wikipedia.org/wiki/Trusted_timestamping#Trusted_(digital)_timestamping https://en.wikipedia.org/wiki/Trusted_timestamping#Trusted_(...
- losfair 4y agoI previously came across TSA but it seems that they don't log to a public ledger like the CT log?
- eps 4y agoWhy would they log into a public ledger? That's not how the PKI works.
- losfair 4y agoPKI works nicely under its presumptions, but a public ledger (like CT where TLS certificates are logged to) is a useful enhancement to it. That way you can actually verify things instead of just trusting the CA.