search

starlinglab / integrity-v2

Monorepo for the next iteration of Starling Lab's integrity pipeline.
MIT License
0 stars 3 forks source link

Browsertrix: DigiCert #50

Closed makew0rld closed 3 months ago

makew0rld commented 3 months ago

Authsign and therefore Browsertrix is going to use DigiCert for timestamping soon instead of freeTSA: https://github.com/webrecorder/authsign/pull/7

The timestamping verification code needs to be updated to trust the DigiCert timestamping root. We will keep trusting the freeTSA root for now to prevent compat issues.

makew0rld commented 3 months ago

Authsign doesn't use DigiCert yet, but I added support for it in the code already. There's no harm in trusting DigiCert early, they are trustworthy.