3 ms·
> Are there any good solutions that would convince a non-technical judge? The judge in this case is actually very technical so that's not a problem. Regardles
by mike_hearn 3y ago
> Are there any good solutions that would convince a non-technical judge?
The judge in this case is actually very technical so that's not a problem.
Regardless, the easiest and most direct way to timestamp something is to use the standard RFC 3161 timestamping servers. There are many, located in different countries and run by different people, and the format is straightforward and standardized. Support is built in to products like Acrobat. You can attach multiple timestamps from different sources to a single file. They are free. It can be explained to non-technical people in a not extreme amount of time, and courts / law firms in any country can easily find expert witnesses who can verify such timestamps and testify to the court as to their veracity.
For emails there's also DKIM, which signs email including the date header. Again, plenty of people who can verify those signatures, so emailing something to someone else and then getting a copy of the raw email will do it (don't email to yourself, that skips the signing process).
Disclosure: I took part in this trial as a witness and testified against Wright.
- sweetjuly 3y agoNote that DKIM does not necessarily sign the message contents. [1] DKIM is only really (in a general sense) intended to provide cryptographic proof that the originating server is permitted to send it. If you need a non-reputable, dated message, you really should use time stamping servers. [1] https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail#Content_modification https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail#Con...
- TillE 3y agoYeah it's odd to see a bunch of people proposing ideas for cryptographic timestamps (on the blockchain!) when anyone who has worked with digital signatures should know about RFC3161. Of course for verification it's important that the timestamp countersignature comes from a reputable CA and not some random server you set up.