🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #1009

Re: Can a single signature, without certificates, be enough?

#1009
From: Fredrik Israelsson
Date: Thu, 08 Jul 1999 00:00
52 lines
2845 bytes
How about letting the retailer have a digital certificate,
which he/she uses to assure the customer's identity to the
distributor after checking the cusomter's identitfication card?
Could that eliminate the need for loading signatures in advance
in, for example, PenOp's products for signature capturing?
How about legal issues? Wouldn't the retailer function as a witness
in this case?

Fredrik Israelsson
Chalmers University of Technology, Sweden


In article <7lvoht$e62$1@nnrp1.deja.com>,
  Fredrik Israelsson <fredrik_is@hotmail.com> wrote:
> I am doing some research for a type of system that is characterized by
> the following.
>
> - A reseller has a computer with a web application for online orders
to
> a distributor.
> - A customer comes in to the reseller's store and wants to make an
> order.
> - The reseller fills out a form in the web application, and lets the
> customer confirm the order by signing it electronically in some way.
> - The customer does not need to have a certificate or anything else
> that proves the authenticity of his signature.
> - The customer does not need to load his signature into some database
> before signing the order. Comparing of signatures only becomes
relevant
> if a dispute between the customer and the distributor takes place.
>
> Is such a system possible to implement?
>
> All kinds of solutions I have read about so far deals with
certificate,
> specialized smart cards and some kind of registration of customer data
> before the actual signing takes place. None of these is needed when
> signing with ink on paper. Why does it seem to be required in all
> computer-related applications?
>
> Thank You all in advance!
>
> Fredrik Israelsson
> Chalmers University of Technology, Sweden
>
> Sent via Deja.com http://www.deja.com/
> Share what you know. Learn what you don't.
>


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
Technical Details
Message-ID: <7m1kha$4ui$1@nnrp1.deja.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <7lvoht$e62$1@nnrp1.deja.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fdbb6,5df7da1ab816ffb
X-Google-Attributes: gidfdbb6,public
X-Google-Thread: 10410e,5df7da1ab816ffb
X-Google-Attributes: gid10410e,public
X-Google-Thread: ff723,5df7da1ab816ffb
X-Google-Attributes: gidff723,public
From: Fredrik Israelsson <fredrik_is@hotmail.com>
Subject: Re: Can a single signature, without certificates, be enough?
Date: 1999/07/08
Message-ID: <7m1kha$4ui$1@nnrp1.deja.com>
X-Deja-AN: 498457558
References: <7lvoht$e62$1@nnrp1.deja.com>
X-Http-Proxy: 1.1 x27.deja.com:80 (Squid/1.1.22) for client 195.67.109.131
Organization: Deja.com - Share what you know. Learn what you don't.
X-Article-Creation-Date: Thu Jul 08 07:38:18 1999 GMT
Newsgroups: comp.security.misc,alt.internet.commerce,a.business.internet
X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)