Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Introducing HelloSign for Gmail

hellosign.com

Post reply on HN
Print view View original

121–130 of 144 posts

Re: Introducing HelloSign for Gmail

#121

Post by miw-sec-work »

Graphical 'signatures' cannot be legally binding as they are trivial to forge.

I also don't understand this retrograde step. I will repeat it. It is trivial to COPY and FORGE a graphical signature! And from a cloud provider??

What about S/MIME and PGP? These are cryptographically strong, essentially unforgable signatures that capture time and can ONLY be signed by the party that holds the private key. That is what i would want from a 'signing' provider.

I used to love the FireGPG plugin for firefox to "do this on gmail from firefox", however the javascript model in firefox meant that this plugin needed to be discontinued. (It could lead to private key disclosure).

Also S/MIME and PGP are open, free, standards that totally make 'graphical' signatures ancient exploitable technology.

Re: Introducing HelloSign for Gmail

#122

Post by jsmeaton »

samaparicio wrote: post #118
nostromo wrote: post #101

I've been using the sign feature in Preview on Mac for a while now and love it. I no longer use a printer. Nice to see someone remove the download, save, and attach step. Every time I use Preview, I can't help but feel like the entire idea of a signature is archaic and strange. In effect, I'm forging my own signature with Preview, and nobody cares. While I'm at it, I wish I could not only "sign" the document, but sig…

Just to point out that when you send a PDF document signed with Preview, I can open that document, extract your signature, and paste it in any other PDF that I want to. For me, this makes it too dangerous to use.

Couldn't they just scan/cut/paste a regularly signed signature? I know it makes the process harder - but someone determined..

Re: Introducing HelloSign for Gmail

#124

Post by js2 »

samaparicio wrote: post #118
nostromo wrote: post #101

I've been using the sign feature in Preview on Mac for a while now and love it. I no longer use a printer. Nice to see someone remove the download, save, and attach step. Every time I use Preview, I can't help but feel like the entire idea of a signature is archaic and strange. In effect, I'm forging my own signature with Preview, and nobody cares. While I'm at it, I wish I could not only "sign" the document, but sig…

Just to point out that when you send a PDF document signed with Preview, I can open that document, extract your signature, and paste it in any other PDF that I want to. For me, this makes it too dangerous to use.

The PDF can be flattened by printing, then saving from the print dialog.

Re: Introducing HelloSign for Gmail

#125

Post by beering »

samaparicio wrote: post #118
nostromo wrote: post #101

I've been using the sign feature in Preview on Mac for a while now and love it. I no longer use a printer. Nice to see someone remove the download, save, and attach step. Every time I use Preview, I can't help but feel like the entire idea of a signature is archaic and strange. In effect, I'm forging my own signature with Preview, and nobody cares. While I'm at it, I wish I could not only "sign" the document, but sig…

Just to point out that when you send a PDF document signed with Preview, I can open that document, extract your signature, and paste it in any other PDF that I want to. For me, this makes it too dangerous to use.

As opposed to regular docs, where I can photograph/scan/screenshot your signature and paste it in?

Re: Introducing HelloSign for Gmail

#126

Post by timfrietas »

nostromo wrote: post #101

I've been using the sign feature in Preview on Mac for a while now and love it. I no longer use a printer. Nice to see someone remove the download, save, and attach step. Every time I use Preview, I can't help but feel like the entire idea of a signature is archaic and strange. In effect, I'm forging my own signature with Preview, and nobody cares. While I'm at it, I wish I could not only "sign" the document, but sig…

If you're interested in what modern day philosophers think of signatures (spoiler: they also think they are strange) check out Limited, Inc. by Jacques Derrida.

Re: Introducing HelloSign for Gmail

#128

Post by joenathan »

jsmeaton wrote: post #122
samaparicio wrote: post #118

Earlier quoted context omitted.

Just to point out that when you send a PDF document signed with Preview, I can open that document, extract your signature, and paste it in any other PDF that I want to. For me, this makes it too dangerous to use.

Couldn't they just scan/cut/paste a regularly signed signature? I know it makes the process harder - but someone determined..

Or just screenshot it.

Re: Introducing HelloSign for Gmail

#129

Post by balbaugh »

nostromo wrote: post #101

I've been using the sign feature in Preview on Mac for a while now and love it. I no longer use a printer. Nice to see someone remove the download, save, and attach step. Every time I use Preview, I can't help but feel like the entire idea of a signature is archaic and strange. In effect, I'm forging my own signature with Preview, and nobody cares. While I'm at it, I wish I could not only "sign" the document, but sig…

Interesting factoid. In many states, the important thing about signatures is the intent of the signatory. Did they intend for said mark, whatever it may be, to be their signature?? If yes, then it is just that.

So, for example, you could just write or type a letter "x" and you would be fine.

Post reply on HN