Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a web application in which the users will be signing an html report. I know how the digital signature authentication works. But here the user will literally be signing the document (So, Should i digitally sign the document as well?). How to verify whether the document is signed by a valid user.

I also want to know in general how the eSignature verification process happen?

share|improve this question
up vote 1 down vote accepted

An electronic signature (in the cryptographic sense, which I'm assuming is the meaning here) is a method of attesting that the holder of a particular private key has signed the document in it's current state. The verification of the private key needs to be handled as a separate step. This can either be by a third party certificate authority or by some procedure to establish the validity of the public key by you.

If it needs to be legally binding, there may be additional requirements in your area and you should consult a lawyer for details about that.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.