Re:How companies use fake sites, backdated articles to censo...
by icebraining on Monday October 01, 2018 @05:17AM
(#18111080)
Right, you'd need something like the blockchain - ie, a timestamping server - to validate the posting date. But then you don't need a signature, just a hash. The advantage of using Google's timestamping service is that it wouldn't need to store the hash/signature, unlike the blockchain.
[ Parent
| on HN ]
Re:How companies use fake sites, backdated articles to censo...
by Boulth on Monday October 01, 2018 @06:22AM
(#18111355)
No, you don't need blockchain for that, just a good old RFC 3161 timestamping server, most big CAs run one and timestamp stuff for free.
Actually secure timestamping is already used by Windows to verify software signatures, even when the signing key expires: https://security.stackexchange.com/questions/47289/how-is-an...
Heck, you can even use Roughtime [0] to achieve secure timestamping as it uses digital signatures and allows you to provide a nonce. Even the design doc [1] mentions this use case:
> This means that Roughtime replies can be used as a time-stamping service, and thus that Roughtime servers can be used to check each other.