Article View: comp.security.misc
Article #1009Re: Can a single signature, without certificates, be enough?
From: Fredrik Israelsson
Date: Thu, 08 Jul 1999 00:00
Date: Thu, 08 Jul 1999 00:00
52 lines
2845 bytes
2845 bytes
How about letting the retailer have a digital certificate, which he/she uses to assure the customer's identity to the distributor after checking the cusomter's identitfication card? Could that eliminate the need for loading signatures in advance in, for example, PenOp's products for signature capturing? How about legal issues? Wouldn't the retailer function as a witness in this case? Fredrik Israelsson Chalmers University of Technology, Sweden In article <7lvoht$e62$1@nnrp1.deja.com>, Fredrik Israelsson <fredrik_is@hotmail.com> wrote: > I am doing some research for a type of system that is characterized by > the following. > > - A reseller has a computer with a web application for online orders to > a distributor. > - A customer comes in to the reseller's store and wants to make an > order. > - The reseller fills out a form in the web application, and lets the > customer confirm the order by signing it electronically in some way. > - The customer does not need to have a certificate or anything else > that proves the authenticity of his signature. > - The customer does not need to load his signature into some database > before signing the order. Comparing of signatures only becomes relevant > if a dispute between the customer and the distributor takes place. > > Is such a system possible to implement? > > All kinds of solutions I have read about so far deals with certificate, > specialized smart cards and some kind of registration of customer data > before the actual signing takes place. None of these is needed when > signing with ink on paper. Why does it seem to be required in all > computer-related applications? > > Thank You all in advance! > > Fredrik Israelsson > Chalmers University of Technology, Sweden > > Sent via Deja.com http://www.deja.com/ > Share what you know. Learn what you don't. > Sent via Deja.com http://www.deja.com/ Share what you know. Learn what you don't.
Technical Details
Message-ID:
<7m1kha$4ui$1@nnrp1.deja.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<7lvoht$e62$1@nnrp1.deja.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fdbb6,5df7da1ab816ffb X-Google-Attributes: gidfdbb6,public X-Google-Thread: 10410e,5df7da1ab816ffb X-Google-Attributes: gid10410e,public X-Google-Thread: ff723,5df7da1ab816ffb X-Google-Attributes: gidff723,public From: Fredrik Israelsson <fredrik_is@hotmail.com> Subject: Re: Can a single signature, without certificates, be enough? Date: 1999/07/08 Message-ID: <7m1kha$4ui$1@nnrp1.deja.com> X-Deja-AN: 498457558 References: <7lvoht$e62$1@nnrp1.deja.com> X-Http-Proxy: 1.1 x27.deja.com:80 (Squid/1.1.22) for client 195.67.109.131 Organization: Deja.com - Share what you know. Learn what you don't. X-Article-Creation-Date: Thu Jul 08 07:38:18 1999 GMT Newsgroups: comp.security.misc,alt.internet.commerce,a.business.internet X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)