Seal

I like this concept! Good luck with this.

I love these sorts of hacks. In fact I did something similar with a project called rget[1] two thoughts: 1. My project got politely asked to not use the ct log and lets encrypt…

This is a good hack, even with some very light abuse (once per 12 hours) of CT logs. I don't see the need to build new tech though. It should be trivial to build a CRUD layer…

Abusing CT log is unethical. For practical purposes DKIM signatures in emails would do the trick. Write an email to yourself, or to someone you trust, its DKIM will include the…

A bunch of comments below indicated that this is technically an abuse of the CT logs. Feel free to use Sigstore instead for this, it's basically the same architecture as CT logs…

As another commenter noted, there's a general internet standard defined already for cryptographically timestamping and signing digital artifacts, like JARs, PDFs, dotNet…

Alternatively, every large CA maintains a public TSA server (time-stamping authority), because it's an integral part of the code signing framework. These are meant for high…

There's also https://opentimestamps.org/ for timestamping into the bitcoin blockchain using a 'calendar aggregation' concept. Clients get back a merkle tree of hashes that can be…

A bunch of comments below indicated that this is technically an abuse of the CT logs. Feel free to use Sigstore instead for this, it's basically the same architecture as CT logs…

I'm not sure what the value proposition is here. Is the idea that you want to use this later to tell others you had the idea first, or to protect your IP? If so, I could…

Outside of patents, which is already a thing, with a very large legal framework around it. Why is that important?

Under Obama, the America invents acts switched patent IP ownership to first to file. Inventing something first no longer matters in patent law.

They can be faked. This, supposedly, cannot.

It's verifiable. Your approach is just "trust me bro".

A bunch of comments below indicated that this is technically an abuse of the CT logs. Feel free to use Sigstore instead for this, it's basically the same architecture as CT logs…

I love these sorts of hacks. In fact I did something similar with a project called rget[1] two thoughts: 1. My project got politely asked to not use the ct log and lets encrypt…

Seems like an interesting problem, but I have zero background knowledge. Could you share who would use this and why?

The only thing I don't get, and forgive me if it's a dumb question, what's the difference with say sending yourself an email/making a github repo/entry/any timestamped note?

As another commenter noted, there's a general internet standard defined already for cryptographically timestamping and signing digital artifacts, like JARs, PDFs, dotNet…

There's also https://opentimestamps.org/ for timestamping into the bitcoin blockchain using a 'calendar aggregation' concept. Clients get back a merkle tree of hashes that can be…

A bunch of comments below indicated that this is technically an abuse of the CT logs. Feel free to use Sigstore instead for this, it's basically the same architecture as CT logs…

As far as I understand there's also Zeitgitter[1], to provide similar proof. [1] https://github.com/zeitgitter/zeitgitterd

The only thing I don't get, and forgive me if it's a dumb question, what's the difference with say sending yourself an email/making a github repo/entry/any timestamped note?

For anyone who’s interested in a quick and dirty way to do it, I just post the sha256 to Twitter/some public forum and reveal when I feel like it