作者归档:Derek

关于Derek

Big things have small beginnings.

免费时间戳服务器

服务器列表

有的时候需要使用时间戳服务,但一时找不到免费的时间戳服务器,所以在这里总结一下。

Digicert:
http://timestamp.digicert.com
Credible: Yes . [Adobe Approved Trust List] and [Windows Cert Store].
Hash: up to SHA512

GlobalSign:
http://aatl-timestamp.globalsign.com/tsa/aohfewat2389535fnasgnlg5m23
Credible: Yes . [Adobe Approved Trust List] and [Windows Cert Store].
Hash: up to SHA512

Sectigo:
https://timestamp.sectigo.com
Credible: Yes . [Adobe Approved Trust List] and [Windows Cert Store].
Hash: up to SHA512
Note: wait 15 seconds between each request.

Entrust:
http://timestamp.entrust.net/TSS/RFC3161sha2TS
Credible: Yes . [Adobe Approved Trust List] and [Windows Cert Store].
Hash: up to SHA512

SwissSign:
http://tsa.swisssign.net
Credible: Yes . [Adobe Approved Trust List] and [Windows Cert Store].
Hash: up to SHA512
Note: only 10 requests per day. For bigger quantities contact the company.

IDnomic:
http://kstamp.keynectis.com/KSign/
Credible: Yes . [Adobe: European Union Trusted Lists] and [Windows Cert Store].
Hash: up to SHA512

QuoVadis + Digicert:
http://tsa.quovadisglobal.com/TSS/HttpTspServer
Credible: Yes . [Adobe Approved Trust List] and [Windows Cert Store].
Hash: up to SHA512

IRN:
http://ts.cartaodecidadao.pt/tsa/server
Credible: Yes . [Adobe: European Union Trusted Lists] and [Windows Cert Store].
Hash: only SHA256
Note: only allows 20 requests in 20 minutes, if more requests are done the IP address will be blocked and legal consequences may happen.

ACCV:
http://tss.accv.es:8318/tsa
Credible: Yes . [Adobe: European Union Trusted Lists] and [Windows Cert Store].
Hash: up to SHA512

BalTstamp:
http://tsa.baltstamp.lt
Credible: Yes . [Adobe: European Union Trusted Lists] and [Windows Cert Store].
Hash: up to SHA512
Note: Limitation applies to non-registered users: no more than 100 requests within one month; the beginning and the end of the month are defined in UTC time.

IZENPE:
http://tsa.izenpe.com
Credible: Yes . [Adobe: European Union Trusted Lists].
Hash: up to SHA512

CERTUM:
http://time.certum.pl
Credible: Yes . [Windows Cert Store]
Hash: up to SHA512

DFN:
http://zeitstempel.dfn.de
Credible: Yes . [Windows Cert Store]
Hash: up to SHA512
Note: commercial use forbidden.

CatCert:
http://psis.catcert.cat/psis/catcert/tsp
Credible: Yes . [Windows Cert Store]
Hash: up to SHA512

Symantec:
http://sha256timestamp.ws.symantec.com/sha256/timestamp
Credible: Yes . [Windows Cert Store]
Hash: up to SHA512

GlobaSign:
http://rfc3161timestamp.globalsign.com/advanced
http://timestamp.globalsign.com/tsa/r6advanced1
Credible: Yes . [Windows Cert Store]
Hash: up to SHA512

Apple:
http://timestamp.apple.com/ts01
Credible: Yes. [Apple CA]
Hash: up to SHA512

FreeTSA:
https://freetsa.org/tsr
Credible: No.
Hash: up to SHA512

SafeStamper:
https://www.safestamper.com/tsa
Credible: No.
Hash: up to SHA512
Note: up to 5 requests per day. For bigger quantities contact the company.

MeSign:
http://tsa.mesign.com
Credible: No.
Hash: up to SHA512

WoTrust:
https://tsa.wotrus.com
Credible: No.
Hash: only SHA256
Note: wait 15 seconds between each request.

Lex-Persona:
http://tsa.lex-persona.com/tsa
Credible: No.
Hash: up to SHA512

Reference

  1. 可信时间戳
  2. List of free rfc3161 servers

更新日志

2021-12-14:更新可用服务器。

公共 DNS 服务器列表

DNS 全称 Domain Name System,即域名解析系统。在互联网上的每一个计算机都拥有一个唯一的地址,称作“IP 地址”(即互联网协议地址)。由于 IP 地址(为一串数字)不方便记忆,DNS 允许用户使用一串常见的字母(即“域名”)取代。公共 DNS 一般指各大运营商或互联网公司提供的,面向公众的 DNS 服务。目前国内较为主流的公共 DNS 服务器有一下几种。

普通 DNS 服务器

  1. 114 DNS:114.114.114.114, 114.114.115.115
  2. 阿里 DNS:223.5.5.5, 223.6.6.6
  3. Public DNS+(腾讯):119.29.29.29, 119.28.28.28
  4. 百度 DNS:180.76.76.76
  5. Google DNS:8.8.8.8, 8.8.4.4
  6. OpenDNS:208.67.222.222, 208.67.220.220
  7. Quad9 (IBM):9.9.9.9
  8. Cloudflare:1.1.1.1, 1.0.0.1

DoH(DNS over Https) 和 DoT(DNS over TLS)

境内

境外

推荐软件
DNS Chooser: 一个支持多上游 DNS 的查询并选择最优解析 IP 的本地 DNS 工具

参考链接
Public DNS Server List

(最后编辑时间:2021-08-08 13:34:27 星期日)

在复杂网络环境下设置 ipv6

自从升级了电信宽带,就在家里折腾光猫、路由器、网线......一度搞的网络状况非常复杂,乃至之前运行正常的 ipv6 访问都失效了。

测试环境:Windows 7 64x
网络环境:电信光猫接入,LAN1 直连电脑通过 PPPoE 拨宽带上网;LAN2 接另外一台路由器,同样拨宽带连接,电脑同时连接上该局域网
错误表现:ping ipv4 地址正常,ping ipv6 地址提示 general failure

解决方案:在内网环境下只能采用 teredo 方式才能适配 ipv6 地址访问,所以要剔出多余的 isatap 和 6to4 适配器。

# 禁用 6to4
netsh interface 6to4 set state disabled
在操作中可能还需要进入 gpedit.msc 手动禁用 6to4

# 禁用 isatap
netsh interface isatap set state disabled

# 最后检查一下网络设置
netsh int teredo show state
ipconfig

参考文章:

Windows7 环境下配置 Teredo 接入 IPv6

关闭Windows7中的6to4/isatap/teredo隧道

个人资产配置的层次

对于个人而言,资产配分至少需要考虑日常开销、大宗消费、突然性重大开支、养老积蓄、投资增值这几个方面,粗略可以分为如下五个层次:

  1. 满足日常开销,一般为3~6个月工资,这部分资金需要有高度流动性,一般以存款或流动性极强的金融产品(如货币基金)为主;
  2. 保护第一项现金流,也就是预防和对冲各类风险,减少风险事件发生对日常现金流造成的影响,一般而言可以通过保险对冲这类风险;
  3. 规划大宗开支,如结婚、子女教育、养老金储蓄等,这类资金需求的特点是额度大且对资金稳定性要求较高,可以考虑定投本币基金、购买养老保险、购买中低风险理财产品等;
  4. 规划和管理个人信用,如信用卡、贷款等;
  5. 综合各方面情况,根据个人风险承受程度来获取更高的收益。