The context is using digitally signed webservices (with XML-DSIG for example) for e-government interoperability between databases.
The idea is to give endorsement to both the data publisher and the data consumer: the data publisher receives signed requests, which ensure the consumer identity, the authenticity of the request, and forbid the repudiation. The same occurs with the response received by the data consumer.
The problem is: who is signing the webservice, and with which legal value? In my country, only "natural" persons are given legal value when digitally signing, and under the principle of being able to read the document before signing it. But obviously a "natural" person isn't able to process and sign every request, so this person has to delegate the signing to the server, with the risk of identity theft it implies.
In this context, do you think this digital signature may be allowed legal value? Do you think any government responsible will accept delegate his digital signature to a server? And the most important: which alternative scheme do you recommend?