capture_web_page_with_proof

com.tizonaintelligence/tizona · Verify this server

Takes a screenshot of a web page and returns a record anyone can check afterwards, with the time signed by an outside timestamp authority. Use it when someone needs to verify a claim about a page later — a price, a listing, a published statement, a term of service. A screenshot you took yourself proves nothing to anyone else, because you could have made it say anything at any time. What it does: - Loads the page in a real browser - Records the final URL after redirects, HTTP status, page title and the server's own date - SHA-256 of the HTML and of the image, separately - Sends the record's hash to a timestamp authority, which signs it under RFC 3161. The clock is not mine, so the date on the record is not mine to move - The signed token comes back with the record. Check it with openssl or any RFC 3161 tool. The authority chains to a public root, so you need nothing from me to verify it What it does not do: - Say the content is true - Say who wrote it or authorised it - Say anyone else saw the same page - Get past a cache. If cacheStatus is HIT you got what the cache held, not the site - Prove the capture happened at the exact second stated. The signed time proves the record existed by then, which is what stops it being written later and backdated If the authority is unreachable the capture still comes back, and the record says plainly that nobody signed it. Check timestamp.status before you rely on the time. Pass those limits on with the result.