21–30 of 80 posts
In my company, we are building a new free product, Kentro Sign, which his a document signing based on Corda blockchain. If you want to try it, it's free (not even a free tier) and it's there : https://sign.kentro.network/ . Feel free to give back any feedback. I am a mere DevOps Engineer, but I will forward it !
There is no delete account option.
It's a legal acceptance problem - and everyone KNOWS docusign and friends and understands how they're admissible. Anything else would have to compete with that and people would be suspicious of it for a long time.
The best way for something like LE for docusign to start would be via a government office of some sort.
we have it in EU, IIRC eIDAS directive. Anyone in EU can digitally sign and verify documents
Wait, we do? Where is this? How do I use it?
basically :
- understand the levels of digital signatures There are some security levels about signatures, on whether a timestamp is necessary, on whether the CA should be official your country, about the HW that create the signature... That allow different properties for different usages.
A 'Trust service provider' offers the highest level of certificate. It will typically be rock solid in court.
But it's ultimately still up to a judge to decide if signatures are valid when you go to courts. If you don't get a signature from the TSP in your country, it doesn't mean it will necessarily be invalid. It's just not pre-aproved, and you will have to establish it yourself. (Is there some law person on HN to back me up here ? Do you know of any case where this had been a point ?)
- find a company that provides you a digital certificate. Some IDs in Europe already come with one (especially in Estonia)
If your country does not, you can browse the EU's list of trusted services to purchase one https://esignature.ec.europa.eu/efda/tl-browser/#/screen/hom...
The price of these services can be widely different between companies. I suggest you shop around, as usual.
- Then follow the procedure of the company. They will verify your identity, so don't be surprised if you have to meet them and show some ID.
we have it in EU, IIRC eIDAS directive. Anyone in EU can digitally sign and verify documents
No free service I know of will let you generate a certificate on the fly with your name on it, which will be considered trusted by most out of the box sw You can get free digital certificates to sign PDFs with your email address, from basically any company. But that is hardly a way to verify your identity. Anyone can create any email address they want, and use any name in the address. The eIDAS directory lists some c…
Did I miss something ? Can someone give me some clue ?
Digital signatures are an interesting topic.
Document signing is NOT a technical problem. It's a legal acceptance problem - and everyone KNOWS docusign and friends and understands how they're admissible. Anything else would have to compete with that and people would be suspicious of it for a long time. The best way for something like LE for docusign to start would be via a government office of some sort.
https://www.zealid.com/en/ does it free of charge
Many governments have implemented this.
electronic document signing as a concept is covered by many software patents if you started your own product doing it you would get sued by DocuSign and friends, and they have lots of money for lawyers so quite hard to disrupt their monopoly
How can something so fundamentally math-based as Public-key cryptography be so heavyliy patented?
It's just series of steps, a recipe. You do "A", then "B", then "C" as outlined in a patent then you violate a patent and the person has the right to sue you. Whether the steps are outlined involve math or not isn't really relevant.
What is covered and not covered by a patent is very arbitrary and based on court precedent. Any sort of sanctions against "pure math functions" are usually easily worked around by including "as done in a computer" or similar language.
Patents are a very good way for governments to retard progress while rewarding large companies for investing in large numbers of lawyers.
Document signing is NOT a technical problem. It's a legal acceptance problem - and everyone KNOWS docusign and friends and understands how they're admissible. Anything else would have to compete with that and people would be suspicious of it for a long time. The best way for something like LE for docusign to start would be via a government office of some sort.
Well you can do it in the EU. You can apply to become a CA for document signing and then give out signed documents. https://www.zealid.com/en/ does it free of charge
Document signing is NOT a technical problem. It's a legal acceptance problem - and everyone KNOWS docusign and friends and understands how they're admissible. Anything else would have to compete with that and people would be suspicious of it for a long time. The best way for something like LE for docusign to start would be via a government office of some sort.
Well you can do it in the EU. You can apply to become a CA for document signing and then give out signed documents. https://www.zealid.com/en/ does it free of charge
Document signing is about verification of authenticity of origin of author. LetEncrypt does not do this, not even for websites. I can get LE certs for millions of end-points I do not own due to the way many cloud providers abuse DNS and sub-domains. Some people do this day and night as a way to make a buck on the side from bug bounties. One of them I will never forget as he adds pictures of cute puppies to corporate…
What we really need is a human notary that digitally signs a document that is scanned and printed with a QR sort of notarization on each page.