Hacker News Reader

Comment by dtx1 | Hacker News Reader

Not entirely true, cryptographic signatures exist. For example the EU eIDAS Law allows Advanced Cryptographic Signatures to basically just be PGP Signed Emails

View on HN

Which unfortunately nobody uses because non-cryptographic signatures (such as Docusign or this but hosted by an independent third-party) are considered good enough in practice.

Hell, nobody even has a smartcard reader, and as far as I know none of the eID cards have contactless capability that phones (who all have NFC readers nowadays) can use.

I wish smartcards took off and computers included readers as standard. This would not only solve strong authentication but also payments (just insert your bank card and do EMV-style payments with comparable levels of security).

The German eID has had that for years now. And it works pretty well. Only problem is that nobody uses it because our processes aren't adapted to it.

The first time I used it for anything, apart from signing pgp keys, was to collect 200€ rent assistance and it worked flawlessly in 4 minutes.

Latvian eID also provides cryptographic signing, and it's widely used when communicating with governmental institutions, because it's mandated by law that they must accept such digitally signed documents, and they have the same legal power as regular documents. I believe the situation in Estonia and Lithuania is probably similar. Many businesses also accept them but it's not universal.

We do use this type of signatures here but for specific use cases, generally with administration like bodies, but not only. Generally speaking, the basic eSign covers 9x% of the needs.

I can sign documents with my goverment ID card, I use my phone NFC as card reader in my computer with an goverment app, it is kind of clunky but it works.

Yeah, we use them here in Lithuania - but I have never seen them used for private contracts.

I'm not even sure how i can use my signature outside the AWFUL experience that is the government esig portal.

I dont think they are accessible for non-resident entities either - i.e. i can only get lithuanian signatures through the lithuanian portal.

This likely explains why they arent used b2b as you would need a separate contract process for foreign and domestic.

Reply on news.ycombinator.com