Collaborate Disseminate
I’m curious about how Windows check the Authenticode signature.
For example, I would sign test.exe
I know that if test.exe doesn’t have a TS (timestamp) signature from a TSA (Timestamp Authority), the signature would ex… Continue reading When would a Authenticode signature expire?
I’m wondering if there exists any trusted third-party service that I can submit a file, or just a signature of a file, and get back a signature of that file signed with the timestamp of when it was signed.
Does any such serv… Continue reading Do any third party time stamping signature services exist?
A qualified trust service provider under eIDAS uses ESSCertIDv2 for their time stamp tokens, but ESSCertIDv2 was not present in the RFC 3161 specification, it was added later in RFC 5816.
RFC 3161 in 2.4.2 requires ESSCertID:
The certific… Continue reading Use of ESSCertIDv2 in a RFC 3161 Timestamp
I get a lot of stack overflow and timestamp that has to do with Amazon and not sure why. I have an Ipad Air and Ipad Pro.
If someone could please educate me on this subject and or problem much appreciated.
RFC 7519 specifies an optional "iat" field, indicating when a token was issued. The RFC provides a terse commentary:
This claim can be used to determine the age of the JWT.
What is the purpose of the "iat" field? For … Continue reading What is the purpose of JSON Web Token (JWS)’s issued at "iat" field?
The JWT Spec (RFC 7519) has an issued at field (“iat”). Does x509 have any analogous value? I see a Validity field, but nothing else time related.
I need to timestamp a file to prove data integrity, not authorship. I will use a RFC3161 qualified timestamping service.
From the EU Regulation Section 6, Article 41, I understand that I can use a timestamp without an electr… Continue reading How to timestamp a document without electronic signature under eIDAS
Today I received a mail reminding me of another mail that the sender supposedly sent some days ago from a gmail adress. This was sent to a gmail adress as well.
I’m 99.9% sure, that I did not receive this mail before today. … Continue reading Is it possible to fake an email timestamp with a gmail address?
I have several timestamp token files that I think should have TSA certificates embedded within them because the “Request TSA certificate” option was selected when I requested them with TimeStampClient. Now I want to verify them with openss… Continue reading How to extract TSA certificate from tst file?
It it possible to insert a list of ct certificate timestamps in the my own certificate created in by internal CA using openssl configuration file. I didnt find any information about ASN.1 sequence describing how to insert SCT… Continue reading Adding custom embedded Precertificate SCTs into the certificate?