Hacker News Reader

Alternatively, every large CA maintains a public TSA server (time-stamping authority), because it's an integral part of the code signing framework. These are meant for high loads, so they can be used to sign each document individually.

https://en.wikipedia.org/wiki/Trusted_timestamping#Trusted_(...

View on HN

I previously came across TSA but it seems that they don't log to a public ledger like the CT log?

Why would they log into a public ledger? That's not how the PKI works.

PKI works nicely under its presumptions, but a public ledger (like CT where TLS certificates are logged to) is a useful enhancement to it. That way you can actually verify things instead of just trusting the CA.

Reply on news.ycombinator.com