Who can be a Time Stamp Authority?

Discussion in 'Computer Security' started by Mark Gifford, Feb 4, 2004.

  1. Mark Gifford

    Mark Gifford Guest

    Hi

    I've been googling like mad trying to find as much information as I can
    about the authorities involved in digital time-stamping but I've not had
    much luck and am probably as confused as I was before I started.

    Some companies' web pages, such as Certum's at
    http://www.certum.pl/english/eng/services/ts/ have statements saying they
    are the first TSA in Europe. How do you become TSA in the first place i.e.
    which other official authority is responsible for overseeing European TSAs,
    or can any company claim to be a TSA - maybe if they satisfy the suggestions
    in RFC3628 "Policy Requirements For TSAs"? Or is it that you publish a TSA
    policy and your customers are satisfied with this (and therefore use your
    service) that makes you a TSA?

    Is there a list of "official" TSAs published somewhere?

    If anyone can point me in the right direction it'd be much appreciated.

    Mark
    Mark Gifford, Feb 4, 2004
    #1
    1. Advertising

  2. "Mark Gifford" <> writes:

    >Hi


    >Some companies' web pages, such as Certum's at
    >http://www.certum.pl/english/eng/services/ts/ have statements saying they
    >are the first TSA in Europe. How do you become TSA in the first place i.e.
    >which other official authority is responsible for overseeing European TSAs,
    >or can any company claim to be a TSA - maybe if they satisfy the suggestions
    >in RFC3628 "Policy Requirements For TSAs"? Or is it that you publish a TSA
    >policy and your customers are satisfied with this (and therefore use your
    >service) that makes you a TSA?


    It's even simpler than that, it works a bit like the Universal Life Church
    (anyone's accepted), all you need to do is publish a web page telling people
    you're a TSA.

    (Hmm, I wonder if you could get the ULC to ordain you as a TSA? I guess it'd
    work, your God would be PKI, X.509 as the sacred scriptures, etc etc.
    There's certainly enough dogma there to qualify it as a religion).

    Peter.
    Peter Gutmann, Feb 4, 2004
    #2
    1. Advertising

  3. Mark Gifford

    sponge Guest

    On 4 Feb 2004 15:56:58 GMT, (Peter Gutmann) wrote:

    >"Mark Gifford" <> writes:
    >
    >>Hi

    >
    >>Some companies' web pages, such as Certum's at
    >>http://www.certum.pl/english/eng/services/ts/ have statements saying they
    >>are the first TSA in Europe. How do you become TSA in the first place i.e.
    >>which other official authority is responsible for overseeing European TSAs,
    >>or can any company claim to be a TSA - maybe if they satisfy the suggestions
    >>in RFC3628 "Policy Requirements For TSAs"? Or is it that you publish a TSA
    >>policy and your customers are satisfied with this (and therefore use your
    >>service) that makes you a TSA?

    >
    >It's even simpler than that, it works a bit like the Universal Life Church
    >(anyone's accepted), all you need to do is publish a web page telling people
    >you're a TSA.
    >
    >(Hmm, I wonder if you could get the ULC to ordain you as a TSA? I guess it'd
    > work, your God would be PKI, X.509 as the sacred scriptures, etc etc.
    > There's certainly enough dogma there to qualify it as a religion).
    >
    >Peter.


    It helps to have an atomic clock.

    Sponge
    Sponge's Secure Solutions
    www.geocities.com/yosponge
    My new email: yosponge2 att yahoo dott com

    ;)
    sponge, Feb 5, 2004
    #3
  4. (sponge) writes:
    >On 4 Feb 2004 15:56:58 GMT, (Peter Gutmann) wrote:
    >>"Mark Gifford" <> writes:
    >>>Some companies' web pages, such as Certum's at
    >>>http://www.certum.pl/english/eng/services/ts/ have statements saying they
    >>>are the first TSA in Europe. How do you become TSA in the first place i.e.
    >>>which other official authority is responsible for overseeing European TSAs,
    >>>or can any company claim to be a TSA - maybe if they satisfy the suggestions
    >>>in RFC3628 "Policy Requirements For TSAs"? Or is it that you publish a TSA
    >>>policy and your customers are satisfied with this (and therefore use your
    >>>service) that makes you a TSA?

    >>
    >>It's even simpler than that, it works a bit like the Universal Life Church
    >>(anyone's accepted), all you need to do is publish a web page telling people
    >>you're a TSA.


    >It helps to have an atomic clock.


    Not really. You could run without any clock at all as long as you report the
    accuracy correctly. For example I could run one accurate to within one
    calendar day without the use of a clock, and rely on sequence numbers for
    ordering. Even if you need an accurate time source, a GPS or NIST/<whatever
    your local time source is> receiver will do just as well.

    Peter.
    Peter Gutmann, Feb 5, 2004
    #4
  5. Mark Gifford

    zenner Guest

    The great equalizer is, no one will "sync" with an inaccurate clock. The
    biggest issue is not getting people to sync with an accurate clock, but to
    prevent overuse or continuous sync.


    "sponge" <> wrote in message
    news:...
    : On 4 Feb 2004 15:56:58 GMT, (Peter Gutmann)
    wrote:
    :
    : >"Mark Gifford" <> writes:
    : >
    : >>Hi
    : >
    : >>Some companies' web pages, such as Certum's at
    : >>http://www.certum.pl/english/eng/services/ts/ have statements saying
    they
    : >>are the first TSA in Europe. How do you become TSA in the first place
    i.e.
    : >>which other official authority is responsible for overseeing European
    TSAs,
    : >>or can any company claim to be a TSA - maybe if they satisfy the
    suggestions
    : >>in RFC3628 "Policy Requirements For TSAs"? Or is it that you publish a
    TSA
    : >>policy and your customers are satisfied with this (and therefore use
    your
    : >>service) that makes you a TSA?
    : >
    : >It's even simpler than that, it works a bit like the Universal Life
    Church
    : >(anyone's accepted), all you need to do is publish a web page telling
    people
    : >you're a TSA.
    : >
    : >(Hmm, I wonder if you could get the ULC to ordain you as a TSA? I guess
    it'd
    : > work, your God would be PKI, X.509 as the sacred scriptures, etc etc.
    : > There's certainly enough dogma there to qualify it as a religion).
    : >
    : >Peter.
    :
    : It helps to have an atomic clock.
    :
    : Sponge
    : Sponge's Secure Solutions
    : www.geocities.com/yosponge
    : My new email: yosponge2 att yahoo dott com
    :
    : ;)


    ---
    Outgoing mail is certified Virus Free.
    Checked by AVG anti-virus system (http://www.grisoft.com).
    Version: 6.0.576 / Virus Database: 365 - Release Date: 1/30/2004
    zenner, Feb 5, 2004
    #5
  6. Mark Gifford

    Jim Watt Guest

    On 4 Feb 2004 18:15:35 -0800, (sponge) wrote:

    >It helps to have an atomic clock.


    Not really, my time is accurate enough without that sort of
    trouble, and you need to change the bulb every so often
    as the caesium is consumed..

    The accuracy of my clock exceeds the ability of a computer
    clock to track it.

    If you are interested in the art of timekeeping, take a look at
    the following sites dedicated to it.

    http://www.leapsecond.com
    http://www.clockvault.com/


    --
    Jim Watt http://www.gibnet.com
    Jim Watt, Feb 5, 2004
    #6
  7. "zenner" <> writes:

    >The great equalizer is, no one will "sync" with an inaccurate clock. The
    >biggest issue is not getting people to sync with an accurate clock, but to
    >prevent overuse or continuous sync.


    If all you're interested in is serialisation (proving that event A happened
    before event B), which is very often the case, you can sync with a stopped
    clock because you've still got the serial number to work from. That's what I
    meant in my previous post when I said I could run a TSA with a calendar.

    Peter.
    Peter Gutmann, Feb 6, 2004
    #7
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Keith
    Replies:
    4
    Views:
    516
    Ralph Fox
    Jan 17, 2006
  2. ICee

    Ntl newsgroup Time stamp

    ICee, Jul 22, 2004, in forum: Computer Support
    Replies:
    5
    Views:
    718
    Joel Rubin
    Jul 23, 2004
  3. Aim High

    No time date stamp analog capture

    Aim High, Sep 20, 2004, in forum: Computer Support
    Replies:
    5
    Views:
    947
    =?ISO-8859-1?Q?R=F4g=EAr?=
    Sep 20, 2004
  4. Mark Peacey

    Time stamp

    Mark Peacey, Dec 28, 2004, in forum: Computer Support
    Replies:
    0
    Views:
    511
    Mark Peacey
    Dec 28, 2004
  5. Gustav
    Replies:
    8
    Views:
    647
Loading...

Share This Page