Not all eSignature solutions are necessarily right for business

The popularity of eSignature solutions has skyrocketed in the last year, as part of companies’ digital transformation efforts in the COVID-19 environment. However, not all eSignatures are necessarily right for business. Considering eSignature solutions… Continue reading Not all eSignature solutions are necessarily right for business

Is there some OSS toolchain for disallowing execution of all unsigned binaries on linux?

Say I’m running a server with Ubuntu and an application stack and I want to lock down potential malicious access.

Is there some OSS toolchain for disallowing execution of all unsigned binaries on linux? I’m imagining some toolchain that a… Continue reading Is there some OSS toolchain for disallowing execution of all unsigned binaries on linux?

What’s the difference between an executable signed with a Windows Digital Signature and one signed with PGP?

I’m trying to figure out how to establish trust in Windows executables that I download from the internet.
Some software that I download, such as KeepassXC, has a Windows Digital Signature, but they also provide a PGP signature that I can m… Continue reading What’s the difference between an executable signed with a Windows Digital Signature and one signed with PGP?

How to sign multiple data sets with a single signature, so that it can be validated for single data set without requiring the rest of the data?

Let’s say Alice has three secrets: SecretA, SecretB, SecretC
Alice shows these three secrets to Bob and gets a single signature from him that signs all three secrets together. Something like
Signature = Sign(Hash(SecretA, SecretB, SecretC)… Continue reading How to sign multiple data sets with a single signature, so that it can be validated for single data set without requiring the rest of the data?