I recently uploaded images of my passport and driver's license to a Certificate Authority (CA) to apply for SSL certificates. The submission was rejected because I have added watermarks to prevent data theft. I explained to the Cert Master that the watermarks do not block any important details on my passport and driver's license and they are meant to prevent misuse in case the data was stolen.
The reply I was given is that this is standard audit requirement by all CAs. If this is so, how do we prevent others from posing as us using those documents if they somehow managed to obtain them?