PGP for official documents / eIDAS and ZertES

[Rainer Hoerbe]

Hi Daniel,

The eIDAS regulation is replacing the national e-signature laws to make signatures (besides other other things) interoperable across borders. While the law is fairly technology-neutral, the implementation acts have to reference specific technologies, which are CMS, PDF- and XML signature, but not PGP-signature.

Beyond that, even if the EU would include PGP signatures, the technical interoperability would just be the beginning. There are quite heavy legal and organization layers on top of the technology that assure security levels, notification (mutual acceptance) and cooperation procedures. IMHU none of these exist in the PGP world.

- Rainer


> Am 31.05.2017 um 12:46 schrieb Stefan Claas <stefan.claas at posteo.de>:
> 
> 
> 
> Am 31.05.2017 um 12:18 schrieb Daniel Pocock:
>> 
>> Hi Stefan,
>> 
>> Thanks for sharing these.  Unfortunately my German skills are not great,
>> could you make any comment about those companies?
>> 
>> In particular,
>> 
>> - does a signature from either of these comply with eIDAS (and therefore
>> ZertES)?
>> 
>> - what effort is required to get the signature (e.g. somebody must come
>> to Germany?)
>> 
>> Regards,
>> 
>> Daniel
>> 
> Hi Daniel,
> 
> i'm not (yet) familar with eIDAS and can't answer that question.
> 
> For your second question. To obtain a sig3 from Governikus you need
> a german id-card an id-card card reader and the software AusweisApp2.
> 
> For a sig3 from the well known CT Magazin in Germany you have to show
> up at their booth (like CeBit Fair, Hannover Fair or Funkaustellung in
> Berlin) with your id-card and a filled out form (downloadable at their
> web site)
> 
> Regards
> Stefan
> 
> 
> 
> _______________________________________________
> Gnupg-users mailing list
> Gnupg-users at gnupg.org <mailto:Gnupg-users at gnupg.org>
> http://lists.gnupg.org/mailman/listinfo/gnupg-users <http://lists.gnupg.org/mailman/listinfo/gnupg-users>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20170531/2fdb07f7/attachment.html>