DocuSign email address database breached and used for phishing campaign

Re:DocuSign email address database breached and used for phi... by a_imho on Tuesday May 16, 2017 @03:01AM (#14347868)

I only met docusign in a brief spell and vaguely remember it looked like some kind of borderline scam for enterprise security checklisters.

How does clicking a link from an email prove identity? How does it work?

[ Parent | on HN ]

Re:DocuSign email address database breached and used for phi... by tyingq on Tuesday May 16, 2017 @07:57AM (#14348868)

>How does clicking a link from an email prove identity?

Most of these document signing services, as you point out, don't prove identity. They provide a more convenient simulation of the "download, physically sign, scan and return, a pdf document" process. Which doesn't prove identity either.

Personally, I appreciate the shift. It's just as silly, but less cumbersome.

[ Parent | on HN ]