Bogus digital signatures, Re: OT: utility account transfer frauds

Casper Dik Casper.Dik at Sun.COM
Mon, 14 Oct 2002 23:34:20 +0200


>Moreover, if the victim keeps the document that they signed, a
>sufficiently expert witness will show that both documents have the same
>hash and so it cannot be determined which document was signed.  You can
>also avoid becoming a victim by insisting that both parties sign, so
>that you can demonstrate the other person's intent.


You must make sure you generate the document you sign; the other
party can then agree to the document but should never able to
determine the hash beforehand.

Casper