News for hackers. Stuff that matters.
Re:The Handshake Deal Protocol by pg on Thursday March 14, 2013 @01:24PM (#5376353)
That's an amusing idea. It would be fine with me if that variant evolved. But it would have seemed frivolous if we'd proposed that.
Re:The Handshake Deal Protocol by mtrimpe on Thursday March 14, 2013 @04:42PM (#5377558)
I keep wishing someone takes up the frighteningly ambitious idea here: developing a low-friction government approved (through e.g. legal precedent) service for signing data.

After a passport/identiy check it would technically just be a highly available service to cryptographically sign blobs, coupled with a mechanism to handle retractions of signed data in case of compromised keys and a decently advanced notification system for early detection of suspected fraud.

On a societal level however, this would enable anything from frictionless contract signing apps to building a Kickstarter for organizing ad-hoc grass-roots referendums whose results are provably meaningful.

Re:The Handshake Deal Protocol by davidmr on Thursday March 14, 2013 @10:20PM (#5378909)
I just bought a house and never signed one piece of paper in the process (up to the closing, of course. Then I signed several hundred pieces of paper.)

All of the contractual agreements until then were signed digitally through DocuSign and they even have a nifty little iphone app. Of course they were all contracts written by my lawyers, but that counts as data. The concept of a written signature is far less relevant than it used to be. As people have mentioned actually signing a piece of paper digitally or otherwise isn't required for many legally binding contracts. (For example, my previous lease on my apartment was an email exchange between me and my landlord agreeing on the terms. Had he or I broken the terms of it, it would have been enforceable in court (in IL at least; anywhere else I couldn't say.))

Re:The Handshake Deal Protocol by mtrimpe on Friday March 15, 2013 @04:34AM (#5379674)
Okay, so DocuSign seems to be quite close. For my idea you'd have to imagine DocuSign with:

- an OAuth(-like) API for other sites, e.g. Reddit, to sign micro-data on your behalf.

- the ability to retract signatures after time X and notify subscribers of that data of it.

- [optionally] a fraud detection algorithm to give advance warning of possible malicious usage (app compromised or your app password.)

- the ability to request confirmation of a signature before time X for cases where retraction after that moment is unaccaptable.

That would make it possible for webapps to have every interaction with it be provably performed by the user, turning it into a legally valid audit trail.

Re:The Handshake Deal Protocol by jnsaff2 on Friday March 15, 2013 @03:10AM (#5379522)
Re:The Handshake Deal Protocol by mtrimpe on Friday March 15, 2013 @04:23AM (#5379651)
I think you missed my point. It'd be quite hard to build e.g. third-pary petition site on GaurdTime.

The other comment's DocuSign suggestion comes closer, but I also doubt DocuSign offers support for third parties to do micro-signing through an API.

Re:The Handshake Deal Protocol by larrys on Thursday March 14, 2013 @01:40PM (#5376474)
The more you do things like that the idea becomes balkanized and you move further from your intention which is nice, simple, easy to remember and understand.