Need digital signatures for signing documents sent to clients

Need digital signatures for signing documents sent to clients

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Need digital signatures for signing documents sent to clients Rex King 08-12-2004
Posted by Rex King on August 12, 2004, 3:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I work for a consulting firm, and we send out proposals for our
services in large quantitities to prospective clients. I need to know
how we can use digital signatures for verifying our documents,
specifically to create signed PDFs and /or Office 2000 documents.
How are these certificates different from SSL certificates? If I buy an
SSL certificate for my organization, can I use the same thing to sign
my documents, after importing it?
Or do you need separate certificates for the purpose?



Posted by John Elsbury on August 13, 2004, 8:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>I work for a consulting firm, and we send out proposals for our
>services in large quantitities to prospective clients. I need to know
>how we can use digital signatures for verifying our documents,
>specifically to create signed PDFs and /or Office 2000 documents.
>How are these certificates different from SSL certificates? If I buy an
>SSL certificate for my organization, can I use the same thing to sign
>my documents, after importing it?
>Or do you need separate certificates for the purpose?
>
I am not sure that you can sign Office documents or PDF files as such.
You can sign e-mails which have them as attachments, using seure mime,
however - that proves to the recipient that you actually sent the
e-mail message and that it wasn't altered betwween sending and
delivery, but that is all it proves. To do that you need a digital
certificate, have a look at the Verisign web site - there ia a good
FAQ there.

If you want to digitally sign the documents themselves then in the
case of Office documents, the best you can do (I think) is put a
complex password on for read and for update. That way you can be
satisfied that nobody can change the documents and, I suppose, if you
communicate the read password "out of band" to the recipient then they
can have some assurance that it came from you. You may be able to
lock PDF files so that they can't be altered as well but I haven't
looked into how that works or how secure it may be.

A lot depends on what you are trying to prove, and how.

Regards

John
Please remove "nospam" from mailto address
when replying


Posted by Ford Prefect on August 14, 2004, 8:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Rex King wrote:
> I work for a consulting firm, and we send out proposals for our
> services in large quantitities to prospective clients. I need to know
> how we can use digital signatures for verifying our documents,
> specifically to create signed PDFs and /or Office 2000 documents.
> How are these certificates different from SSL certificates? If I buy an
> SSL certificate for my organization, can I use the same thing to sign
> my documents, after importing it?
> Or do you need separate certificates for the purpose?
>

Take a look at PGP -- depending on the size of your office,
it may be easier to just have each person acquire a copy rather
than resort to the enterprise versions.

And contrary to the other poster, you can digitally sign the documents
directly with PGP. Version 8 supports XP and Office XP



Similar ThreadsPosted
Re: Need digital signatures for signing documents sent to clients August 13, 2004, 5:15 am
Management of code signing digital IDs and pvk files May 5, 2005, 6:04 pm
Discussion Regarding Digital Signatures August 1, 2007, 1:12 pm
E-mail, S/MIME, Digital Signatures & Encryption - HELP! February 3, 2005, 2:15 pm
Security Flaw with Digital signatures in Microsoft Outlook February 17, 2005, 9:09 pm
Probe launched after CIBC loses data on clients January 18, 2007, 6:03 pm
Is it safe to email scanned documents as attachments? June 21, 2008, 11:45 am
High Security Networks - Removing recent documents July 23, 2006, 1:10 pm
Facial Biometrics 2006: The Documents, Imaging & Security Conference April 25, 2006, 11:06 pm
Can IPSec connect 2 VPN Clients or is ALWAYS an IPSec server needed ? July 25, 2005, 7:40 pm

The site map in XML format XML site map

Contact Us | Privacy Policy