5
$\begingroup$

I see there a number of free TSA services according to this page (not all are still in service).

In other sources I see references to the requirement of audits for the TSA to be 'rfc3161 compliant'. Given the number of free services, not to mention the new blockchain services (which are similar but not exactly the same as rfc3161), I'm finding it difficult to imagine they have all spent money on getting audited and certified. (This may pose a problem if and when the timestamps are presented before a legal court and their validity addressed or refuted by the opposing party). I am curious to know for the U.S.:

  1. Are audits performed by a specific organization or private contractor?
  2. In the U.S., is there an organization responsible for issuing a 'seal of approval'?
Improve this question
$\endgroup$
2
  • $\begingroup$ It's not the US, but in Europe it appears ETSI 319 421 and ETSI 319 422 could be relevant here and I'd suppose if you ask nicely your standard audit company that also issues the standard CA audits can also audit for this. (Though I didn't have time yet to read through the standards to see if any specific body is mentioned for certification) $\endgroup$
    – SEJPM
    Jan 22, 2019 at 9:21
  • $\begingroup$ Sounds expensive... probably beyond the means of any "free TSA". My guess might have been NIST (although they are a non-authoritative organization) or maybe some organization for weights and measurements. $\endgroup$
    – user8897013
    Jan 25, 2019 at 8:18

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.