Digital ID's

[Anonymous]

I just tried the new Digital ID extension. It must be a "conspiracy" to make
money for Verisign!
Skip that!
Go to http://www.wildid.com/
They will give you a free digital ID.
Sheez! You buy a product which "forces" you to buy another product? What a
racket!

--
Regards,
---------------
Reid M. Addis
Architectural Applications Specialist
Granary Associates
411 North 20th Street
Philadelphia, PA 19130
Ph. 215-665-7056
email: addis@granaryassoc.com

[Anonymous]

Hello!

On Wed, 26 Sep 2001 11:43:58 -0700, "Reid M. Addis"
wrote:

>I just tried the new Digital ID extension. It must be a "conspiracy" to make
>money for Verisign!
>Skip that!
>Go to http://www.wildid.com/
>They will give you a free digital ID.
>Sheez! You buy a product which "forces" you to buy another product? What a
>racket!

I'm no expert on digital id's and signatures but for the ID to have
any value there has to be some trust in the 'organisation' that is
creating the ID. Verisign has the trust of mayor software companies
but who is trusting an ID which WildID has created?

I would stick to PGP instead!

// Anders

[Anonymous]

Anders,

Wildid and PGP looks like an entirely different thing for email protection
and encryption. Verisign is the only worldwide recognized and certified
authentication company just like signed ActiveX controls on the internet use
Verisign. This is a necessary requirement as you would most likely not just
trust Autodesk, an unknown company, or your own server used for another
company so we needed the worldwide recognized security authentication
company as well they do not do things for free as people will be using their
servers and verification to validate your signatures. You can get a free 60
day signature and it works for email as well as digitally signing your
completed drawings.

Just so you are clear the digital signature is a way to sign a completed
drawing for such purposes as assuring it has not been modified after signing
and also the signature can contain a time stamp to prove when it was
completed.

http://www3.autodesk.com/adsk/item/0,,877485-123112-587113,00.html
www.verisign.com

Sincerely,

Shaan Hurley
Autodesk Beta Programs
http://betaprograms.autodesk.com


"Anders M Eriksson" wrote in
message news:pmilrt0cj5oub9ml015ir8aejglodf9u77@4ax.com...
> Hello!
>
>>
> I'm no expert on digital id's and signatures but for the ID to have
> any value there has to be some trust in the 'organisation' that is
> creating the ID. Verisign has the trust of mayor software companies
> but who is trusting an ID which WildID has created?
>
> I would stick to PGP instead!
>
> // Anders
>

[Anonymous]

Hello Shaan!

Thanks for your reply!

On Wed, 3 Oct 2001 05:54:31 -0700, "Shaan Hurley"
wrote:

>Wildid and PGP looks like an entirely different thing for email protection
>and encryption.

Can't talk for WildID (.which looks a bit unsafe anyway.) but with PGP
you can create digital signatures!

>Verisign is the only worldwide recognized and certified
>authentication company just like signed ActiveX controls on the internet use
>Verisign. This is a necessary requirement as you would most likely not just
>trust Autodesk, an unknown company, or your own server used for another
>company so we needed the worldwide recognized security authentication
>company as well they do not do things for free as people will be using their
>servers and verification to validate your signatures. You can get a free 60
>day signature and it works for email as well as digitally signing your
>completed drawings.
>

I think you're talking about the 'Digital Signature Extension' and
that this AutoCAD extension demands a Verisign signature.

You could, maybe not as easely, use PGP for the same purpose. PGP's
authentication is based on that known persons are signing my
signature. I.e., the CEO for your company signs my signature which
then says that he trusts my signature. The more people that sign my
signature the higher the trust of my signature.

In the Verisign version then we MUST trust Verisign as a company. Not
knowing anything about the company or the people that work there.


>Just so you are clear the digital signature is a way to sign a completed
>drawing for such purposes as assuring it has not been modified after signing
>and also the signature can contain a time stamp to prove when it was
>completed.
>
>http://www3.autodesk.com/adsk/item/0,,877485-123112-587113,00.html
>www.verisign.com
>
Actually I didn't know about the 'Digital Signature Extension', but
I'm looking in to it know. Hmmmm.... Maybe someone should make an 'PGP
Signature Extension' 🙂

// Anders

[Anonymous]

Maybee using the same functionality that Adobe Arobat is using.

Sometimes it's overkill using Verisign i think.

--
Best regards: Jimmy B
CAD manager at www.emtunga.com
Take a look at SmartPurger or download some freeware at
http://jtbworld.vze.com or http://hem.fyristorg.com/cadman



"Anders M Eriksson" wrote in
message news:j9aort4in989i1m4v61fllemcjcjtbp39i@4ax.com...
> Hello Shaan!
>
> Thanks for your reply!
>
> On Wed, 3 Oct 2001 05:54:31 -0700, "Shaan Hurley"
> wrote:
>
> >Wildid and PGP looks like an entirely different thing for email
protection
> >and encryption.
>
> Can't talk for WildID (.which looks a bit unsafe anyway.) but with PGP
> you can create digital signatures!
>
> >Verisign is the only worldwide recognized and certified
> >authentication company just like signed ActiveX controls on the internet
use
> >Verisign. This is a necessary requirement as you would most likely not
just
> >trust Autodesk, an unknown company, or your own server used for another
> >company so we needed the worldwide recognized security authentication
> >company as well they do not do things for free as people will be using
their
> >servers and verification to validate your signatures. You can get a free
60
> >day signature and it works for email as well as digitally signing your
> >completed drawings.
> >
>
> I think you're talking about the 'Digital Signature Extension' and
> that this AutoCAD extension demands a Verisign signature.
>
> You could, maybe not as easely, use PGP for the same purpose. PGP's
> authentication is based on that known persons are signing my
> signature. I.e., the CEO for your company signs my signature which
> then says that he trusts my signature. The more people that sign my
> signature the higher the trust of my signature.
>
> In the Verisign version then we MUST trust Verisign as a company. Not
> knowing anything about the company or the people that work there.
>
>
> >Just so you are clear the digital signature is a way to sign a completed
> >drawing for such purposes as assuring it has not been modified after
signing
> >and also the signature can contain a time stamp to prove when it was
> >completed.
> >
> >http://www3.autodesk.com/adsk/item/0,,877485-123112-587113,00.html
> >www.verisign.com
> >
> Actually I didn't know about the 'Digital Signature Extension', but
> I'm looking in to it know. Hmmmm.... Maybe someone should make an 'PGP
> Signature Extension' 🙂
>
> // Anders
>

[Anonymous]

"Reid M. Addis" wrote:

> I just tried the new Digital ID extension. It must be a "conspiracy" to make
> money for Verisign!

Use of the Digital Signature Extension requires a digital ID (certificate) to
identify the signer; any digital ID can be used, not necessarily one from
VeriSign. We recommend VeriSign as they offer various levels of identification,
including a free trial version.


> You buy a product which "forces" you to buy another product?

Perhaps the documentation is not clear, but the Digital Signature Extension does
not require purchasing a digital ID. Higher levels of identification are
available at a price, but self-certification will work equally as well (as long
as those receiving your self-certified signatures accept this type of
identification).
--
Frank Whaley
Autodesk, Inc.