AnthonyK wrote:
I have tried that timestamp URL in both the EBC export wizard and with ZXPSignCmd and it works in both. And, the ZXPSignCmd -verify indicates the timestamp is valid.
Great! I don't think your certificate "conflicts" with the timestamp server, so as long as your extensions are concerned you should be OK.
Also, once you've timestamped the thing, there's no link anymore with the original server AFAIK. I've inspected the signature.xml and there's only a <xades:EncapsulatedTimeStamp> tag with a bunch of Base64-like code in it.
By the way, I guess Adobe will provide additional server URLs in case the one they recommend is going to get offline.
FYI, here's a link with additional info about timestamping: https://www.eldos.com/security/articles/5731.php?page=all
Regards
Davide Barranca
---
www.davidebarranca.com
www.cs-extensions.com