This is the latest entry in our “What is an Electronic Signature, Anyway?” series. You can find previous entries here.
Recently, I’ve received a number of emails from our users asking questions about electronic signatures, so I thought it would be useful to briefly answer some of these frequently asked questions and also direct you, dear reader, to a variety of resources here at Adobe that can help.
First, I recommend you read the other blog entries in our “What is an Electronic Signature, Anyway? “ series to better understand the terminology and issues surrounding electronic signatures.
Now onto the questions…
I want to electronically sign a PDF—what do I need to do?
There are lots of different ways to electronically ‘sign’ documents, but they vary in terms of reliability, longer-term validity, and application.
At a very basic level, you could create a signature stamp or use the (new in Acrobat 9) ‘Apply Ink Signature’ capability to put a handwriting-like signature on the PDF that could be printed out or emailed, much in the same way a fax signature might work. These signatures don’t get you much more than that fax signature, and can be manipulated, duplicated or deleted unless the document is ‘flattened,’ but it’s one way to get started. Unfortunately, these kinds of signatures will not lock out changes or notify the recipient if something has been changed in the document…which is not so different than a wet ink signature, is it?
At a more sophisticated level, you could use a dedicated signature pad and software to capture your signature and embed it into the document. This can lock the document and notify the recipient if changes have been made. Several of our partners provide hardware and software plug-ins to manage this type of signature: CIC, Interlink, and SoftPRO.
Finally, you have digital signatures, which can lock down the document and notify recipients that the document has been changed, resulting in higher trust in the document. Acrobat provides you with the capability to create so-called ‘self-signed’ digital IDs (credentials) used to create digital signatures. While these are convenient, they do not offer the recipient any proof of the signer’s identity…the signer is vouching for his or her self. However, this may be sufficient for personal use or small-medium businesses exchanging documents in trusted relationships.
You can also purchase digital IDs from third party ‘Certificate Authorities,’ who can validate your identity and provide better assurance as to your digital signature. These digital IDs may offer other benefits too, such as automatic trust in Acrobat and Reader, and embedding of secure time & validation information (Certified Document Services). More below…
Does Adobe provide digital IDs (certificates) for use with digital signatures? If not, where do I get them?
No, Adobe does not provide digital IDs, other than giving you the ability to create self-signed ones. We rely on close partnerships with a number of leading Certificate Authorities (CAs) from around the world to provide these certificates to our customers. Certificates can be bought on a one-off basis to sign your PDF documents and email, or your organization could actually contract with these CAs for a managed service where certificates are provisioned to your users via web interfaces. Other partners sell appliances and other products that can make deploying certificates quite easy. Visit our Security Partner Community and explore the partners and solutions listed under “Digital ID infrastructure.”
Of course, your organization may already be running a PKI (public key infrastructure) in-house that can provide you with a digital ID…be sure to check with your IT department.
I’ve read about CDS…how do I join the program?
I have received a number of inquiries about Adobe’s Certified Document Services (CDS) program and see that there is some confusion about how the program works.
Note that Adobe does not sell CDS certificates per se, but rather administers the program and provides the structure by which our CDS Providers can create these higher assurance, higher trust signing credentials—in use today with the US Government Printing Office, top universities, and other organizations looking to provide assurance as to the authorship and integrity of documents of record.
So, if you are interested in taking advantage of these credentials to sign your organization’s PDF documents and experience the automatic trust provided by CDS, please contact Adobe’s CDS Providers to purchase a CDS digital ID.
However, if your organization actually operates a Certificate Authority, and you would like to learn more about how to participate in the trust programs offered by Adobe, please contact us here.
Where do I go to get more information?