HN user

johnfonesca

140 karma

Founder of Bulksign, the digital signatures platform for everyone

https://bulksign.com

Posts0
Comments31
View on HN
No posts found.

But all projects need to have the same formatting and style.That too can be easily done with one nuget using msbuild.

That's like using a car for "traveling" 3 meters. Why not just use dotnet format + .editorconfig , they were created just for this purpose.

[dead] 2 years ago

Twitter employees were asked to print some of their best code and bring it for review by Musk.

The ETSI checker you have linked doesn't have anything to do with CA API interoperability and "switch document signer provider". That's just a basic tool which validates if a signature is PADES/ETSI compliant or not.

The real value in eIDAS would be "unlocked" if they would release a proper API specification with which a digital signatures application would integrate with any EIDAS CA to emit/sign certificates. And then enforce that any eIDAS compliant CA would implement this API.

In practice that means any company/digital signatures product could do a integration with this API once and then be able to use ANY certification authority they want/need/offer best prices for certificates.

Without this API, eIDAS is just a marketing moniker because the power belongs to the selected Certification Authorities. They set the prices, they choose WHOM can integrate with them to isse certificates and there is NO interoperability between them. This doesnt allow for a open market and makes the top players control everything while shouting "standards" and "eIDAS".....

it makes it easy to switch document signer provider etc since they all are forced to implement the same interface.

eIDAS was introduced in 2016. Now 7 years later there still isn't a API specification for interoperability (there are drawings though https://blog.eid.as/new-apis-for-the-eidas-ecosystem/ )

In the meantime, any digital signature done in EU must be done with a certificate issued only by the "select" CA to be considered "valid".

Which is another way of saying "expensive certificates".

True, basically eIDAS is a cartel. With the help of EU legislation, some Certification Authorities banded together and are now saying that certificates emited by anyone but them are not good. And obviously they fully controll the pricing for the "good" certificates.

We are developing a digital signatures solution, https://bulksign.com which also has a on-premise version (in addition to SAAS). In Europe, at least, we see an increase in interest for customers having the solution installed on their own servers for security reasons. So more people become aware that sending your confidential documents to a 3rd party is not that great security wise.

As a KDE user i agree with this point of view. KDE is the most customizabile DE ever created. You can tweak the crap out of it to make it look and behave EXACTLY the way you want it. And, from my experience, the performance of the current 5.x version (running on Wayland) is very good.

How is it different than having to use GOG's website to install a purchase you made or download an updated version?

You buy game on GOG, dowload the installers, move it to a external HDD and you can install that game forever. This is the only thing that is actually DRM free.

Needless to say, you can't to that with ANY other store (be it Steam, Epic etc). All of them requires you to install their crap to access your bought games and they don't give you full offline installers.

"I feel that open sourcing SublimeText is the only way for SubmlineText to be relevant and compete against VSCode."

The SublimeText people make a living by developing and selling a honest product (and they're probably happy doing that).

There's nothing wrong with not competing with VSCode.

Speaking as a application developer (digital signatures solution) which has to integrate with government related entities, i'd love an official government-run authentication. Just give me an OAuth endpoint for the government solution which allows me to authenticate users and it will make the life simpler for everyone.

My company is developing a digital signatures platform called Bulksign https://bulksign.com

We want to encourage broader use of advanced digital signatures and we are giving the on-premise version of this platform for FREE to any NON-PROFIT organization from anywhere in the world which wants it.

With droughts and up to 10l of water being used to make 1 sheet of A4 paper, i think natural resources are better spent elsewhere and digital documents and digital signatures should become the norm.