News for hackers. Stuff that matters.
Re:How to Spoof PDF Signatures by ggambetta on Wednesday March 06, 2019 @12:28PM (#19320731)
> President Bill Clinton enacted a federal law facilitating the use of electronic and digital signatures in interstate and foreign commerce by ensuring the validity and legal effect of contracts. He approved the eSign Act by digitally signing it. (emphasis mine)

Am I the only one bothered by the fact that there's a bug in that procedure? Before he signed the act, digitally signing wasn't legal, and the act doesn't become law until it's signed, so... I understand why they did this, but as an engineer, I find this problematic XD

Re:How to Spoof PDF Signatures by mfoy_ on Wednesday March 06, 2019 @12:38PM (#19320819)
Or maybe it's a neat, built-in, self-destruct sequence for the law. i.e. The law is only valid if we're confident it's his signature. As soon as digital signatures are proven insecure, we can no longer be certain the act was signed, therefore it's not law.

Probably not the case, and just a PR gimmick, but still. I like to dream. :)

Re:How to Spoof PDF Signatures by cloudsinthesky on Wednesday March 06, 2019 @01:07PM (#19321058)
> there's a bug in that procedure

Are you sure? I don't think there is!

> Before he signed the act, digitally signing wasn't legal,

Is that true? I think this is the source of error here. In your quote citation (the full extent of my knowledge on this topic), it says that the bill being signed is to facilitate the use of those signatures, and to ensure the validity. It doesn't state that it is making e-signatures legal for the first time ever, it's stating that it is clarifying that they are for-sure good-to-go.

I don't think there is a bug in the procedure.

Re:How to Spoof PDF Signatures by drewrv on Wednesday March 06, 2019 @07:40PM (#19324569)
I caught that too, but the president doesn't have to sign a bill for it to become law. If its unsigned for 10 days and congress is in session then it takes effect.