4 ms·
Previous discussion of a similar tool: https://news.ycombinator.com/item?id=30024165 https://news.ycombinator.com/item?id=30024165 I'll reiterate what I said t
by gyulai 5y ago
Previous discussion of a similar tool:
https://news.ycombinator.com/item?id=30024165 https://news.ycombinator.com/item?id=30024165
I'll reiterate what I said there: I think there's a legal angle here that should probably be sorted out by lawyers & forensics experts before something like this goes into widespread use or gets marketed at professional scale.
The law sometimes requires certain documents to be "in writing" and there is, unfortunately, a legal tradition tied to this that "in writing" means "physically on paper", which lawmakers and bureaucrats unfortunately haven't managed to properly transition into the digital age.
However something that is quite a separate matter is the question of whether one needs to actually be in possession of that piece of paper. A scan of an original serves as proof that the original exists. ...and this is usually all that anyone requires for practical intents and purposes.
But: You're not supposed to do print/sign/scan, and then just throw away the original or not have an original in the first place. You're kind of supposed to keep it in case you're ever asked by a court to produce it. The document partially loses its forensic value if no original can be produced.
Even worse: If a digital forensics expert can prove in court that a piece of digital forensics came from this tool, it may no longer be possible to distinguish a scenario where you used it in good faith because you didn't have a scanner on hand versus a scenario involving fraud where a third party used a scan of your signature plus this tool to create the appearance that you signed and scanned a document that you never did in fact sign. Or it could be alleged that you might have deliberately used this tool instead of signing the document for real to deliberately engineer deniability into this piece of digital forensics based on the previous line of reasoning.
Personally, I'd advise anyone to just keep their distance from these sorts of tools.
And writing/using the tool as a web service where people upload documents instead of downloading the tool seems like an especially bad idea. Why take the risk of exposing presumably sensitive documents to a third party?