I have noticed that most digital signature providers do not try to certify anything but an e-mail address, while it is quite easy to create an email address without disclosing any personal information.
Thus, I may know the e-mail address of a signatory and nothing else.
If a legal dispute occurs, how do I know who really holds the e-mail address ? How to avoid repudiation ?
Why is it that apparently nobody cares ?
Actually some people do care, especially in Italy (I let you figure out why). In particular, infocert.it proposes web recognition.
in summary, you would get a digital ID after showing you real ID to somebody, possibly an official.
In Belgium, they (propose to) put a certificate into the ID card.
An intermediary way (safer than email, lighter than de visu recognition or making all ID cards smart) could be based on mobile GSM phone, as it is not normally possible (?) to buy a SIM card without showing one's ID and the buyer is responsible for its use and can revoke it in case of loss.
Do you know about digital signature based on SIM card ? Google gives some answers but I found nothing practical.
I am interested in practical solutions but also theoretical advice please.