dss-x — archive

[Andreas Kuehne]

Detlef, > is there a legal foundation for having a revision period, which > must be several hours? The german sig law in Section 17 says : >> (2) The presentation of data to be signed requires >> signature-application components that will first clearly indicate the >> production of a qualified electronic signature and enable the data to which the signature refers to be identified.<< ( see http://www.bundesnetzagentur.de/media/archive/3612.pdf ) The word 'first' is interpreted in a way that the certificate owner must be aware _beforehand_ of a qualified signature creation. One usual way to fulfil this requirement is to implement a time frame where signing requests may be reviewed. This is a way to NOT require an explicit click for each and every signature. But indeed, afaik there are no explicit time frames given. It's just a traditional way to fulfil the legal requirements and to comply with the idea that our regulatory body recognizes as best practices. Hope this helps ... Andreas ___________________________________________________ Andreas Kühne phone: +49 177 293 24 97 mailto: kuehne@trustable.de Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna Amtsgericht Hamm HRB 5868 Directors Andreas Kühne Heiko Veit Company UK Company No: 5218868 Registered in England and Wales