3 ms·

Managing electronic signatures (e.g. DocuSign & file storage) is a 10x improvement for me compared to printing, signing, mailing or faxing, and file cabinets.

Managing electronic signatures (e.g. DocuSign & file storage) is a 10x improvement for me compared to printing, signing, mailing or faxing, and file cabinets. The complexity & reduced costs are definitely worth it. YMMV.

necovek 3y ago
DocuSign is a very weak signing system: signatures it produces are forgeable by anyone getting even a temporary access to an email (eg sitting on an unlocked computer or grabbing an unlocked phone), and the graphical part is something anyone can't replicate twice, unless you use one of their fonts making it even more easily forgeable. I don't even remember seeing an option to say that a particular email should always use a specific form (eg drawing of a signature). Basically, compared to hand-written signatures, they are strictly less secure and a demonstration of how technology makes forgery easier. Would you like it if your bank accepted transfer orders through DocuSign?
- Foobar8568 3y ago
  Because you believe that a wet paper signature is actually better or even verified? And you have multiple levels of requirements in e-signature.
  - necovek 3y ago
    There are strong electronic signatures which are as safe as a signature can be: iow, a question of who generated the key (an issue with keys provided by official cert authorities) and how is it kept safe at rest (basically, how much care a user takes of them). DocuSign is, in general, neither of these. I am sure there are less convenient options with DocuSign than the email based one, but I've only ever been asked to "sign" by attempting to draw my signature using a mouse or their own font. I'd rather have someone attempt to forge my handwriting which experts can usually detect, and which requires a bit more sophistication: my concern is not about them being validated, but that instead if I claim how that's not my signature, I can easily provide a bunch of past signatures to an expert to prove my point. There are free software and free hardware tokens which can generate secure certificates to use for encryption or signing. I would probably trust those best.
prepend 3y ago
I just sign the pdf with preview and save it off to a folder. Works great.

necovek 3y ago

DocuSign is a very weak signing system: signatures it produces are forgeable by anyone getting even a temporary access to an email (eg sitting on an unlocked computer or grabbing an unlocked phone), and the graphical part is something anyone can't replicate twice, unless you use one of their fonts making it even more easily forgeable. I don't even remember seeing an option to say that a particular email should always use a specific form (eg drawing of a signature). Basically, compared to hand-written signatures, they are strictly less secure and a demonstration of how technology makes forgery easier. Would you like it if your bank accepted transfer orders through DocuSign?

Foobar8568 3y ago
Because you believe that a wet paper signature is actually better or even verified? And you have multiple levels of requirements in e-signature.
- necovek 3y ago
  There are strong electronic signatures which are as safe as a signature can be: iow, a question of who generated the key (an issue with keys provided by official cert authorities) and how is it kept safe at rest (basically, how much care a user takes of them). DocuSign is, in general, neither of these. I am sure there are less convenient options with DocuSign than the email based one, but I've only ever been asked to "sign" by attempting to draw my signature using a mouse or their own font. I'd rather have someone attempt to forge my handwriting which experts can usually detect, and which requires a bit more sophistication: my concern is not about them being validated, but that instead if I claim how that's not my signature, I can easily provide a bunch of past signatures to an expert to prove my point. There are free software and free hardware tokens which can generate secure certificates to use for encryption or signing. I would probably trust those best.

prepend 3y ago

I just sign the pdf with preview and save it off to a folder. Works great.