On Mon, 31 Dec 2007 11:51:20 +0200, Eugene Mayevski wrote:

> Hello!
> You wrote on Mon, 31 Dec 2007 04:22:28 -0500:
>
> A> I see what your saying but the most important process is the
> A> authentication of the *identity* of the signer. If there is no ID that
> A> is verified, then the rest doesn't matter. I can use your Adobe on your
> A> computer to sign in your name as long as I can get to your software.
>
> That's a totally different story. Digital signatures don't prove the
> identity of the user, they prove the set of "what the person has" and "what
> the person knows". With digital means you can't reliably prove "what the
> person is", i.e. whether the signature or fingerprint - once they are placed
> into the document, they can be duplicated.
>
> Example: you can copy the signature (or fingerprint) from the document I
> signed, then come to my computer and use it to create another document.
> Afaik there's no reliable solution for this problem.
>
> With best regards,
> Eugene Mayevski

Yes, that is what I am saying, why not have a single program that will do
both? Your identity is carried to the signature; if the signature is
queried, the ID proof could emerge as well.