Live data from Hacker News

Show HN: Get e-signatures & pay per signed doc

signwith.co

31–40 of 50 posts

Re: Show HN: Get e-signatures & pay per signed doc

#31

Kind of tangential, but I'll share a bit of a horror story from a friend when it comes to e-signatures. The company in question uses DocuSign, and most of their clients do as well. They are big, serious companies. However, nobody is able to set up DocuSign in a reasonable way for a multi-client contract. Every company needs to use their own DocuSign. Now, DocuSign embeds a cryptographic signature in the signed PDF. T…

If you think about it, the worse is just this kind of cargo cult to do the same thing that is used to be done with paper on a computer without really understanding why you do it.

Like, on paper, you are supposed to all "sign" the same paper document to show that this is the same document/content that is agreed by everyone. And so, when you DocuSign it, people do the same thing with everyone signing the same document even with a fake "handwritten" signature....

But if you really think about it, the signature already proves the content, so you would only have to have all the parties sign individually their own "copy" and then exchange the signed pdf signed by them. If you own a copy signed by you, and a copy signed by another person, as we have the proof of the content of each one, you know that it is the same contract that was agreed...

Re: Show HN: Get e-signatures & pay per signed doc

#32
> Last week, we started building signwith.co/

And this week the product’s launched? That doesn’t inspire confidence in what’s supposed to be a legal matter, and trust seems to be the #1 thing you need in this business if the tech is so trivial. Putting signatures on PDFs is free, if I can’t trust your ability to resolve legal disputes I’ll use free instead of paying you whatever your idea of cheap is.

Re: Show HN: Get e-signatures & pay per signed doc

#34
OP, agreed something better than DocuSign is required. Check out Estonia’s digital signature platform — been around and developed for a couple of decades as the entire country runs on it.

In other words, it’s a solved problem, just little known outside the EU. And it works really well! Second, I suspect there are things to learn from the platform they built and the way digital signatures can be trusted within an entire society. DocuSign is astonishingly bad not because of the tech alone but because of the approach.

(Signature spots are mimicking pen signatures. Why not avoid that, or generate them based on the digital signature, eg as a visual / printable representation then digital signature, the way a QR code carries bits? Make something that survives printing!)

Re: Show HN: Get e-signatures & pay per signed doc

#35
post #14

Earlier quoted context omitted.

Pdf signatures are a joke and entire wrb e-signature space is snake oil sales. Source: worked for docusign competitor and seen how signing twice works. We at least did the print to pdf thingy ourserves on the backend to save users from this shame. Add: you can in fact sign the pdf multiple times with a digital signature, which is an actual feature of PDF format. You can't however add electronic (drawn) signature on t…

In France/EU we can use certified eIDAS signature for documents. It’s not free but it makes the signature not worth nothing

pdf signatures are certainly not worth nothing, in fact they are eIDAS compliant. It's just the government being the government so it's left hand doesn't trust the right one.

What eIDAS actually solves is not signatures, but strong identification. You log into the system and it knows your tax id or whatever primary identifier you have. It's promoted as a secure way to sign documents, but it's just technofetishism.

Non-repudiation isn't even a technical problem, as you can have verbal contracts too. Replying to an email is totally fine way to enter into a contract too, but something like invoices have to be signed or stamped (or both). If you request something from the government (in the Netherlands), ticking a checbox and pressing a button is totally legit and you don't have to dance around ECDSA for a single moment, because the left hand trust the right hand.

Now if somebody is conspiring with a tax officer to commit VAT refund fraud and then telling to the judge they didn't send any refund and never got any money -- it's not checkboxes and pdfs to blame really.

Re: Show HN: Get e-signatures & pay per signed doc

#36
post #16

Earlier quoted context omitted.

Nobody is in fact disputing their signatures in court.

That in fact happens all time time with signatures... A signature can be used to validate the existence and legitimacy of a contract and the terms contained within a specific version of a contract, so disputes over signatures happen quite frequently. Indeed, DocuSign spent years establishing that their system could be used to authenticate signatures and the documents they were attached to so they could break into the…

That's just the nice story DocuSign have to tell to deal with other people having their interests. It's not an actual fact of life.

Re: Show HN: Get e-signatures & pay per signed doc

#37

OP, agreed something better than DocuSign is required. Check out Estonia’s digital signature platform — been around and developed for a couple of decades as the entire country runs on it. In other words, it’s a solved problem, just little known outside the EU. And it works really well! Second, I suspect there are things to learn from the platform they built and the way digital signatures can be trusted within an enti…

>(Signature spots are mimicking pen signatures. Why not avoid that, or generate them based on the digital signature, eg as a visual / printable representation then digital signature, the way a QR code carries bits? Make something that survives printing!)

That's the actual unsolved problem of digital documents.

Regulatory technofetishism requires digital signatures strongly tied to identifiable person (natural or otherwise). eIDAS solves that perfectly, as long you have a digital id issued by your government of residence (the one expecting to connect the document through the signature to a primary key in their database). Nobody except a few governments here and there actually use it and when they do it's mostly a closed system with controlled access anyway.

What people actually need (i.e. how people really work with documents) is a PDF with a signature visible in all PDF viewers, that you can also print and bring to a local government office if they for some reason have in-person process for it. Now in theory, you can have PDF fields and fill them with digital signatures produced by your eIDAS-compatible qualified id. Nobody (almost) ever does that, because your typical workflow doesn't require extracting strong identity from the signed document. The fact that adobe viewer operates on a different chain of trust compared to eIDAS doesn't help.

So what people do is adding signatures as content to the document, than signing it digitally with pdf fields sequentially. It works fine, but you can't add another content-signature on top for obvious reasons and you can't counter sign if the field wasn't present before (and document is locked).

Add: to even start properly solving this, one needs to understand how documents generally work, how (federated) governments work, read the actual law, also understand cryptograrphy and PDF format and after all that make a nice UX. And people who can mostly understand all of above have better things to be busy with, as there is no money in it anyway.

Re: Show HN: Get e-signatures & pay per signed doc

#38

Kind of tangential, but I'll share a bit of a horror story from a friend when it comes to e-signatures. The company in question uses DocuSign, and most of their clients do as well. They are big, serious companies. However, nobody is able to set up DocuSign in a reasonable way for a multi-client contract. Every company needs to use their own DocuSign. Now, DocuSign embeds a cryptographic signature in the signed PDF. T…

If you think about it, the worse is just this kind of cargo cult to do the same thing that is used to be done with paper on a computer without really understanding why you do it. Like, on paper, you are supposed to all "sign" the same paper document to show that this is the same document/content that is agreed by everyone. And so, when you DocuSign it, people do the same thing with everyone signing the same document…

>If you own a copy signed by you, and a copy signed by another person, as we have the proof of the content of each one, you know that it is the same contract that was agreed...

Then you need to show a third party the contract signed by both sides. On paper or sent by fax. When you say digital document trust services eIDAS, the party replied that it's not a participant in the trust architecture (as defined by eIDAS-implementing law) and didn't buy the license for software needed to verify it. The party is a judge, so they are right and you are wrong. True story that did actually happen and nobody was even disputing the fact of document being signed.

Post reply on HN