code-signing
Code signing: which timestamp servers are more reliable?
We run some experiments and DigiCert timestamp server was the fasted and most reliable. It was able to timestamp 2500 signatures within 3'48'' with no failures. But just in case it really throttles us or it is not reachable for whatever reason, what are the next fast and reliable timestamp servers?
We would prefer something that is already in the Trusted Root CA list in Windows. That pretty much limits us to Microsoft, GlobalSign, VeriSign, Sectigo and Thawte. But none of these seem to provide the same level of quality of service of DigiCert.
It looks like the Apple timestamping server is also very reliable. Unfortunately it is not in the Windows Trusted Root CA store by default.
Solution
We finally decided on these servers:
- http://timestamp.digicert.com
http://sha256timestamp.ws.symantec.com/sha256/timestamp- http://timestamp.comodoca.com/authenticode
- http://timestamp.sectigo.com
- How to get a "codesigned" gdb on OSX?
- Signing product flavors with gradle
- Code signing: which timestamp servers are more reliable?
- How do I create timestamp url or where can I find free timestamp url for MSIX app packages
- How to code sign the Inno Setup uninstaller using cloud service?
- Azure trusted signing Identity validation process stuck due to inability to upload required documents
- How can i remove signing from Powershell?
- How can I invoke Azure Trusted Signing from a Linux OS?
- Codesigning a program that runs with MPI
- Inno Setup code signing not applying for all the files. How to fix that?
- Missing signing identifier when creating an archive for an ios app containing a static library built with cmake
- Code signing issue with SPM Dynamic Library
- Where is SignTool /d info (description of the signed content) used/displayed?
- Cannot find provisioning profile for Mac Catalyst App
- Code Signing "No account for team" message when signing for different developer account
- Profile doesn't match the entitlements file's value for the application-identifier entitlement
- "Warning: unable to build chain to self-signed root for signer" warning in Xcode 9.2
- Tauri/Angular App for MacOS - After adding Signing, running bash script shuts down whole app
- How does one correctly dual-sign code with a timestamp?
- Remove the strong name from 3rd party assemblies?
- How to export Sectigo Code Signing Certificate to PFX for Electron Forge's Windows Code Signing?
- Automate Extended Validation (EV) code signing with Yubico Yubikey
- How do I create a self-signed certificate for code signing on Windows?
- How can I skip code signing for development builds in Xcode?
- How to avoid Windows SmartScreen blocking my WIX 5 signed bundle
- SignTool: can't sign XLSM (DOCM)
- Application signing/verification
- Codesign an executable and allow the modification of some bytes
- What does get-task-allow do in Xcode?
- signtool.exe Error: SignerSign() failed (-2147220492/0x800403f4) when signing Excel Macro