what does a timestamp signature mean? [was: Re: Problem with faked-system-time option]

[MFPA]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Thursday 16 June 2011 at 7:53:34 PM, in
<mid:4DFA512E.1060807 at fifthhorseman.net>, Daniel Kahn Gillmor wrote:



> ???  When i make a signature with a timestamp in it, i
> am very much making (and intending to make) the
> assertion that the signature was made at that time.  I
> see no repudiation in your message, only that "some
> people don't know that they are making this claim".

How would somebody make a signature without a timestamp in it?


>  I'd also argue that
> some people don't know that when they put a date next to their
> pen-and-ink signature, they're making the claim that that pen-and-ink
> signature was made on that date.  But it's certainly what most of us
> mean by it.

Perhaps. But in the pen-and-ink case they consciously added the date.
In the OpenPGP case, the timestamp automatically tags along as part of
the signature.


- --
Best regards

MFPA                    mailto:expires2011 at ymail.com

Ballerinas are always on their toes.  We need taller ballerinas!
-----BEGIN PGP SIGNATURE-----

iQE7BAEBCgClBQJN+8JvnhSAAAAAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf
a2V5X0ZpbmdlcnByaW50IEAgIE1hc3Rlcl9rZXlfRmluZ2VycHJpbnQgQThBOTBC
OEVBRDBDNkU2OSBCQTIzOUI0NjgxRjFFRjk1MThFNkJENDY0NDdFQ0EwMyBAIEJB
MjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0N0VDQTAzAAoJEKipC46tDG5pDgoD/iU8
J/7EZ2ozVn1rGUzrjQ5B5gicZPAZTegzFckC49/bJiNfywA+jIP+7KZuV2t0cToz
FyYPyf7ibDs3HQuRPvOHB6/xnmg0G/VuFssVjW8bOTRn6N+QDjDMf6u1TSEfHoh/
YTPgbPj1StfSJ12FonkgwUgxDDk5jNwlg4jY8Ict
=X798
-----END PGP SIGNATURE-----