X-Git-Url: http://pere.pagekite.me/gitweb/homepage.git/blobdiff_plain/da87610a8a564cb884b9aea9e7746561c8503d39..89ffd321bf102b4a6c84afb03fb55a559d20a60c:/blog/Public_Trusted_Timestamping_services_for_everyone.html diff --git a/blog/Public_Trusted_Timestamping_services_for_everyone.html b/blog/Public_Trusted_Timestamping_services_for_everyone.html index 585a5a4463..f4e94a0035 100644 --- a/blog/Public_Trusted_Timestamping_services_for_everyone.html +++ b/blog/Public_Trusted_Timestamping_services_for_everyone.html @@ -45,11 +45,13 @@ few years ago as RFC 3161. The mechanism is simple. Create a hash of the file in question, send it to a trusted third party which add a time stamp to the hash and sign the result with its private key, and send back the -signed hash + timestamp. Anyone with the document and the signature -can then verify that the document matches the signature by creating -their own hash and checking the signature using the trusted third -party public key. There are several commercial services around -providing such timestamping. A quick search for +signed hash + timestamp. Both email, FTP and HTTP can be used to +request such signature, depending on what is provided by the service +used. Anyone with the document and the signature can then verify that +the document matches the signature by creating their own hash and +checking the signature using the trusted third party public key. +There are several commercial services around providing such +timestamping. A quick search for "rfc 3161 service" pointed me to at least DigiStamp, @@ -64,16 +66,18 @@ trusted third party is not compromised.

timestamp services available for everyone. I've been looking for one for a while now. But yesterday I found one over at Deutches -Forschungsnetzmentioned in +Forschungsnetz mentioned in a -blog by David Müller. I then found a good recipe on how to use -over at the -University -of Greifswald. The OpenSSL library contain both server and tools -to use and set up your own signing service. See the ts(1SSL), -tsget(1SSL) manual pages for more details. The following shell script -demonstrate how to extract a signed timestamp for any file on the disk -in a Debian environment: +blog by David Müller. I then found +a +good recipe on how to use the service over at the University of +Greifswald.

+ +

The OpenSSL library contain +both server and tools to use and set up your own signing service. See +the ts(1SSL), tsget(1SSL) manual pages for more details. The +following shell script demonstrate how to extract a signed timestamp +for any file on the disk in a Debian environment:

 #!/bin/sh
@@ -124,6 +128,13 @@ to set up?

 
Archive