Talk:Digital signature: Difference between revisions
Jump to navigation
Jump to search
imported>Howard C. Berkowitz (→A point I've seen both ways: new section) |
imported>Howard C. Berkowitz (→Authentication: new section) |
||
| Line 6: | Line 6: | ||
Again, you method will work, but I try to add features that can add a human as well as a pure crypto check. [[User:Howard C. Berkowitz|Howard C. Berkowitz]] 14:01, 10 November 2008 (UTC) | Again, you method will work, but I try to add features that can add a human as well as a pure crypto check. [[User:Howard C. Berkowitz|Howard C. Berkowitz]] 14:01, 10 November 2008 (UTC) | ||
== Authentication == | |||
Should it be established that the signer should have first authenticated with at least two factors? [[User:Howard C. Berkowitz|Howard C. Berkowitz]] 14:07, 10 November 2008 (UTC) | |||
Revision as of 08:07, 10 November 2008
A point I've seen both ways
What you describe will work, but there's an additional potential check. In the body of the message hashed by the sender can be, minimally, some plain text, and preferably, a "inner signed signature", or ideally inner signature and trusted time stamp, also signed by a trusted third party.
Again, you method will work, but I try to add features that can add a human as well as a pure crypto check. Howard C. Berkowitz 14:01, 10 November 2008 (UTC)
Authentication
Should it be established that the signer should have first authenticated with at least two factors? Howard C. Berkowitz 14:07, 10 November 2008 (UTC)