Re: Digital signature repository
- From: Mike Amling <spamonly@xxxxxxxxxxx>
- Date: 13 Dec 2006 22:29:43 EST
David R. Tribble wrote:
David R. Tribble wrote:Are there any newsgroups or web sites dedicated to storing digital
I did find this site in a post in alt.security.pgp:
PGP Digital Timestamping Service
"Stamper is a free digital timestamping service which uses PGP and
operates via Internet email."
So it's close but not exactly what I'm looking for.
Mike Amling wrote:There are lots of timestamp services. Many of them show up when you
search for timestamp service RFC 3161. You can publish the timestamp of
your data yourself on a blog or other web page, or in the classifieds,
or just hang on to it.
The problem with publishing a digital signature myself is that it is
possible that I could have faked it.
That's why you get the digital signature of your data and the date/time it was signed (that can be verified using the service's public key) from a timestamp service such as those that support RFC 3161.