5 ms·

By "digitally sign", do you mean insert a picture of your handwritten signature? It can do that: https://www.macrumors.com/how-to/digitally-sign-a-pdf-using-pre

by sqs 6y ago

By "digitally sign", do you mean insert a picture of your handwritten signature? It can do that: https://www.macrumors.com/how-to/digitally-sign-a-pdf-using-preview-on-mac/ https://www.macrumors.com/how-to/digitally-sign-a-pdf-using-.... If you mean cryptographically sign, then disregard my comment.

freefriedrice 6y ago
Yeah, the latter: keychain certificate (under "Certificates").
hunter2_ 6y ago
This lack of differentiation really grinds my gears. Why in the world do both of these activities share a name? It would be really interesting to take a random sample of the population and ask them some basic context like their occupation/education, and ask them whether a digital signature comprises a graphic of handwriting (validated with eyeballs) or something more sophisticated (validated with math). There will be some obvious trends, but I suspect there will also be some surprises.
- saagarjha 6y ago
  The point of a signature is to affirm the authenticity of something. When you sign something by hand, you're showing that you reviewed it. If you cryptographically sign something, you're doing the same thing to a bunch of bits, and arguably in a way that's a less easy to forge.
- freefriedrice 6y ago
  You're referring to "term overloading". This is pervasive throughout all domains of engineering, but more so in software because there are so many conflicting standards, definitions and citations. It's really hard to get a handle on. Like, I would assume that posting on HN the audience would assume I would not confuse "overlaying pixels of my signature on a document," with, say ECDSA sign & verify. But I was wrong to assume that. So, barring a common definition, should we speak with increased precision thus verbosity? Perhaps. But if THIS example grinds your gears, hooo boy, hang of for a ride.... :)
  - smichel17 6y ago
    To my own surprise, it was a pretty pleasant read and I didn't realize you were intentionally being over-verbose until "overlaying pixels".

by sqs 6y ago

freefriedrice 6y ago

Yeah, the latter: keychain certificate (under "Certificates").

hunter2_ 6y ago

This lack of differentiation really grinds my gears. Why in the world do both of these activities share a name? It would be really interesting to take a random sample of the population and ask them some basic context like their occupation/education, and ask them whether a digital signature comprises a graphic of handwriting (validated with eyeballs) or something more sophisticated (validated with math). There will be some obvious trends, but I suspect there will also be some surprises.

saagarjha 6y ago
The point of a signature is to affirm the authenticity of something. When you sign something by hand, you're showing that you reviewed it. If you cryptographically sign something, you're doing the same thing to a bunch of bits, and arguably in a way that's a less easy to forge.
freefriedrice 6y ago
You're referring to "term overloading". This is pervasive throughout all domains of engineering, but more so in software because there are so many conflicting standards, definitions and citations. It's really hard to get a handle on. Like, I would assume that posting on HN the audience would assume I would not confuse "overlaying pixels of my signature on a document," with, say ECDSA sign & verify. But I was wrong to assume that. So, barring a common definition, should we speak with increased precision thus verbosity? Perhaps. But if THIS example grinds your gears, hooo boy, hang of for a ride.... :)
- smichel17 6y ago
  To my own surprise, it was a pretty pleasant read and I didn't realize you were intentionally being over-verbose until "overlaying pixels".