Hacker News new | ask | show | jobs
by DaiPlusPlus 448 days ago
> Courts don't really care about ECDSA signatures or x509 certificates. They readily accept faxed documents, which are literally low resolution scans and are trivial to forge

I'm aware (I asked a similar question almost 10 years ago[1] - but my love-affair for S/MIME is really quite unrelated to legal-repudiation: it's about basic e-mail security: S/MIME gives us encryption, which is still really late-to-the-party as even today probably all of our emails could be read by our MX/MTA sysops; and S/MIME signatures solve SMTP's unauthenticated sender problem (and sidesteps all of the half-measures since then to try to put the cat back in the bag like DKIM, SPF, etc). All of this is far removed from DocuSign and other "document signing" services, really.

But yes, I'll readily admit S/MIME is entirely irrelevant outside of paranoid security.txt contacts and is practically unusable by the masses - and then some.

[1]: https://security.stackexchange.com/questions/116896/are-docu... ) -