3 ms·
The idea with TLSNotary is that you can have several universities or central agencies running signing servers but you dont have to share the cleartext content o
by nikisweeting 2y ago
The idea with TLSNotary is that you can have several universities or central agencies running signing servers but you dont have to share the cleartext content of your archives with them to get it signed.
This dramatically changes what is possible with signing because previously to get ArchiveTeam's signature of approval, they would have to see the content themselves to archive it. With TLSNotary they can sign without needing to see the content/access the cookies/etc.
- viraptor 2y agoIsn't that already possible with any kind of notary by giving them a sha256 of the content only? Or am I missing some distinction?
- nikisweeting 2y agoYou can do that but it proves nothing because TLS session keys are symmetric, so the archiver can forge server responses and falsely attest that the server sent them. Look up "TLS non repudiation" A real solution like TLSNotary involves a neutral, reputable third party that can't see the cleartext attesting to the cyphertext using a ZK proof. The neutral third party doing attestation can't see the content so they can't easily tamper with it, and attempts to tamper indiscriminately would be easily detected and ding their reputation.