Problem with faked-system-time option
jerome at jeromebaum.com
Tue Jun 14 22:19:24 CEST 2011
>> You should tell apart who has to prove something. Your
>> argument is valid if the signer has to prove that he
>> has made the signature at (or before or after) a
>> certain date and time. His own signature is no proof in
>> that case as he can easily fake the timestamp.
>> If a third party has to prove that and when the signer
>> has signed a document then the signature timestamp is
>> perfectly OK.
> Suppose the party who originated the document to be signed
> subsequently presents (possibly faked) evidence showing the document
> to have been prepared later than the signature timestamp. The signer
> is now unexpectedly in the position of having to prove something.
Not really, without any context. Nobody has to prove anything without
email jerome at jeromebaum.com
PGP: A0E4 B2D4 94E6 20EE 85BA E45B 63E4 2BD8 C58C 753A
PGP: 2C23 EBFF DF1A 840D 2351 F5F5 F25B A03F 2152 36DA
More information about the Gnupg-users