title: Alternative timestamping services for Authenticode
body: <p>We perform code signing and timestamping for all our production builds. Occasionally (usually when we are about to RTM (!)) the timestamp server at Verisign ("<a href="http://timestamp.verisign.com/scripts/timstamp.dll" rel="noreferrer">http://timestamp.verisign.com/scripts/timstamp.dll</a>") decides to go offline intermittently.</p>
  
  <p>What should we do in this case?</p>
  
  <ul>
  <li>Does the timestamp server have to be hosted by
  your root certification authority?</li>
  <li>Are there any other network-hosted timestamp servers we could use
  instead of Verisign if their server is down? Suggestions for other highly available and <em>free</em> alternatives are welcome :)</li>
  </ul>