News for hackers. Stuff that matters.
Re:Ask HN: Why is Docusign a $50B company? by vsenko on Saturday November 27, 2021 @05:45PM (#29364358)
Now really sure that it'll help you, but in Kazakhstan digital signatures can be legally significant (have equal significance as hand-written signatures) in case if several requirements are met.

One of the requirements is that certificate has to be issued by accredited CA. And there is one such CA - National CA (https://pki.gov.kz/), it issues such certificates for free.

Also there is a service that allows anyone to sign any file using a certificate issued by National CA - https://sigex.kz, thus making it legally significant. It's free for use (except for heavy RPS enterprise users and the ones, how need support).

So in Kazakhstan you can do e-docs signed by e-signs totally for free.

P.S.: Pardon, but the links are in Russian.

Re:Ask HN: Why is Docusign a $50B company? by DyslexicAtheist on Saturday November 27, 2021 @05:54PM (#29364425)
The KZ government PKI has had quite the history:

- Kazakhstan man-in-the-middle attack https://en.wikipedia.org/wiki/Kazakhstan_man-in-the-middle_a...

- "Certificate cannot be trusted" warning in Kazakhstan https://support.mozilla.org/en-US/kb/certificate-cannot-be-t...

- Kazakhstan Attempts to MITM Its Citizens https://www.f5.com/labs/articles/threat-intelligence/kazakhs...