3 ms·

>2. Cryptographic signature, using Public Key Infrastructure (PKI), etc. This isn't really practical until we have widespread client certificates, or something

>2. Cryptographic signature, using Public Key Infrastructure (PKI), etc. This isn't really practical until we have widespread client certificates, or something like EIP-712 in mainstream usage. It's very practical and used in certain jurisdictions, with very high rollout rate of personal certificates. Within EU regulatory framework it's also a thing and has legal meaning, then there is US government with their weird fixation on contact-only smartcards. That being said, it's globally deployed with an "advanced", rather then "qualified" profile, where provider applies a signature with their own certificate (or ethemeral certificate issued to user on the spot) and embeds it into pdf as a field. European Commission even has a library [0] in addition to the law for that. It's kind of a mess, but nobody really cares until somebody tries to challenge validity of their own signature, which is very very rare. As a former industry insider I would say it's all a security theater and you can as well exchange emails to confirm existence of a contract. It's just more convenient to have a document with a signature as a single artifact, even if it's produced in ms pain as you rightly suggest. [0] https://ec.europa.eu/digital-building-blocks/sites/display/DIGITAL/Digital+Signature+Service+-++DSS https://ec.europa.eu/digital-building-blocks/sites/display/D...

Daviey 3y ago
Do you have some statistics on the "very high rollout rate"? I am skeptical of its success.
- Muromec 3y ago
  Here you go: https://diia.gov.ua/news/perereyestraciya-avto-e-pidpriyemec-ta-novij-dizajn-diyi-yaki-poslugi-prezentuvali-na-diia-summit https://diia.gov.ua/news/perereyestraciya-avto-e-pidpriyemec.... 50% of all adults have the app, almost everybody else has a bank account and proper PKI is part of both and is pre-requisite to deal with tax authorities and e-services in general. Since it's also built into most European id cards for the last forever, it's not a certificate rollout problem is "why do I even need this" problem. In Ukraine PKI finally found the problem it was solving, due to VAT return fraud and repudiation through courts. In Lithuania and Estonia it's also widely used, but I'm not familiar with their landscape that much.
- dzikimarian 3y ago
  Anecdotal, but I use it daily in company setting (as does many people in my company) and 90% time when contacting government in personal matters. Honestly it's pretty awesome.

Daviey 3y ago

Do you have some statistics on the "very high rollout rate"? I am skeptical of its success.

Muromec 3y ago
Here you go: https://diia.gov.ua/news/perereyestraciya-avto-e-pidpriyemec-ta-novij-dizajn-diyi-yaki-poslugi-prezentuvali-na-diia-summit https://diia.gov.ua/news/perereyestraciya-avto-e-pidpriyemec.... 50% of all adults have the app, almost everybody else has a bank account and proper PKI is part of both and is pre-requisite to deal with tax authorities and e-services in general. Since it's also built into most European id cards for the last forever, it's not a certificate rollout problem is "why do I even need this" problem. In Ukraine PKI finally found the problem it was solving, due to VAT return fraud and repudiation through courts. In Lithuania and Estonia it's also widely used, but I'm not familiar with their landscape that much.
dzikimarian 3y ago
Anecdotal, but I use it daily in company setting (as does many people in my company) and 90% time when contacting government in personal matters. Honestly it's pretty awesome.