Lessons from Failed DocuSign Integration • Hacker News Board

Re: Lessons from Failed DocuSign Integration

#81

Post by jelling » Fri, Jan 25, 2019, 6:10 AM UTC

Just use HelloSign. Their developer support is the best I've had from an API company - you email them and you get support from an actual developer - and they smartly do things to save everyone trouble like creating an API debug console so you can see what they receive on their end. I wish all of our API partners followed their lead.

The best thing I can say about Docusign is that it is way, way better than Adobe Sign's absolute garbage support. The Adobe software may work but if you have the slightest problem with the API you will be in support hell.

Re: Lessons from Failed DocuSign Integration

#82

Post by enraged_camel » Fri, Jan 25, 2019, 7:12 AM UTC

sunir wrote: post #43

fyjvd90 wrote: post #16

Earlier quoted context omitted.

OAuth is going to be hard to use if you don’t create an account though, there’s no way for DS to know what scopes to restrict the user to, it sounds like that was the core issue that broke their workflow.

I think it is very unclear what is real and not real. OP is mostly passing blame to DocuSign without achieving full understanding themselves. That is more an indictment on OP than DocuSign even if there is some actual session security problem with DocuSign (likely from the deprecated API).

>>I think it is very unclear what is real and not real. OP is mostly passing blame to DocuSign without achieving full understanding themselves.

To be fair, it is difficult to achieve "full understanding" with such garbage documentation as DocuSign's.

Re: Lessons from Failed DocuSign Integration

#83

Post by ykevinator » Fri, Jan 25, 2019, 12:11 PM UTC

We rolled our own bc out of box solutions were crazy expensive. Any one else do this? I'm kind of surprised how much people are willing to pay for something that is not that hard to build. You can't build your own twilio or Google maps but Hou absolutely can build your own signature feature.

Re: Lessons from Failed DocuSign Integration

#84

Post by jlbooker » Fri, Jan 25, 2019, 6:46 PM UTC

bdauvergne wrote: post #59

All those online signatures "click to sign" services are useless anyway, they have absolutely no legal value anywhere (their EIDAS/ETSI whatever are just buzzwords), even in France from where docusign is coming. https://www.cryptomathic.com/news-events/blog/us-court-rejec...

In North Carolina, the "Click to Sign" services (such as DocuSign) must be licensed/approved by the North Carolina Department of the Secretary of State. An electronic signature from a licensed provider is just as good as a paper signature. They certainly have legal value and are used for real estate closing and the like.

NB: HelloSign, the other provider that's come up in the comments here, is not on the Secretary of State's list and is therefore worthless in North Carolina (and they're possibly in violation of the law for offering such services without seeking approval).

Secretary of State page listing approved providers (including DocuSign): https://www.sosnc.gov/divisions/notary/e_notary_solution_pro...

Electronic signatures are the same as paper signatures: https://www.smithdebnamlaw.com/2015/05/electronic-signatures...

Relevant North Carolina General Statute: https://www.ncleg.net/EnactedLegislation/Statutes/PDF/ByArti...

Re: Lessons from Failed DocuSign Integration

#85

Post by anitil » Tue, Jan 29, 2019, 12:24 AM UTC

DaiPlusPlus wrote: post #62

kevindong wrote: post #61

Earlier quoted context omitted.

That article is pretty clear that the docusigned documents were invalid due to that specific court's rules. To quote from the ruling [0] directly: > Although DocuSign affixations and other software-generated electronic signatures may have a place in certain commercial and other transactions, they do not have a place as substitutes for wet signatures on a bankruptcy petition, schedules, statements, and other documents…

A real solution is a proper PKI - a great way forward would be if the US federal government issued citizens with X.509 digital certificates when they get their passport renewed: they’ve done the task of verifying identity, they just need to co-sign a cert and give people $5 smart cards with their $100 passports. With state-sponsored PKI we can eliminate so many headaches and rockblocks in the digital economy and pape…

Given the whole SSN debacle and the low passport ownership in the US, I see this as functionally impossible.