Time-stamping.

"Prashant Dambe" <prashant@elock.co.in> Tue, 20 March 2001 11:24 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA01335 for <pkix-archive@odin.ietf.org>; Tue, 20 Mar 2001 06:24:19 -0500 (EST)
Received: from localhost (daemon@localhost) by above.proper.com (8.9.3/8.9.3) with SMTP id DAA05922; Tue, 20 Mar 2001 03:23:42 -0800 (PST)
Received: by mail.imc.org (bulk_mailer v1.12); Tue, 20 Mar 2001 03:23:31 -0800
Received: from pdcpune.elock.co.in (pdcpune.elock.co.in [196.1.104.8]) by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA05860 for <ietf-pkix@imc.org>; Tue, 20 Mar 2001 03:23:28 -0800 (PST)
Received: from insight (insight.fcpl.co.in [196.1.104.150]) by pdcpune.elock.co.in with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id HDBQC411; Tue, 20 Mar 2001 16:52:46 +0530
Message-ID: <001a01c0b130$280b4e30$966801c4@insight>
From: Prashant Dambe <prashant@elock.co.in>
To: ietf-pkix@imc.org
Subject: Time-stamping.
Date: Tue, 20 Mar 2001 16:53:15 +0530
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0017_01C0B15E.4195C370"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Precedence: bulk
List-Archive: http://www.imc.org/ietf-pkix/mail-archive/
List-ID: <ietf-pkix.imc.org>
List-Unsubscribe: mailto:ietf-pkix-request@imc.org?body=unsubscribe

Time-stamping of the dataum does not bind the time-stamped data to paticular user.
So where it will be used as it does not bind creator identity. Any one can 
claim that  I am the author of the document. Until there is specifically identification
of the creator inside the document itself.
One way to do this is to to sign over dataum plus time-stamped -data.
In this case user can replace the signature put its own signature.
So Is not that time-stampng of signature value is necessary.
And if the time-stamped signature value is placed as unsigned attribute,
it can be also replaced and it is undetectable in current specification.
So in the current draft IS time-stamp generated fully secured?


Prashant Dambe