Skip to content

Signetie is a electronic signature application that relies on the user's Google+ identity as the signature authority.

License

Notifications You must be signed in to change notification settings

kagalle/signetie

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

62 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

signetie

Signetie is a electronic signature application that relies on the user's Google+ identity as the authority of the signature.

Project is under development.

Updated status 3/12/2017:

  • Java code under cli_client contains routines that will be needed to support the signing of documents. Will need to be ported to golang.
  • Golang code under client_golang contains a working GTK+/golang application that performs the Google App Engine login and authentication for desktop applications. The is the first necessary piece of the application. The rest of the functionality will rely on this.

Signetie is an application that allows you to digitally sign documents like text files and source-code files, linking them to your Google profile. These documents can be shown to be signed by you, and the signature itself will be linked to the Signetie application. The recepient of the document will be able to verify the document as yours by using Signetie to verify that the document's signature is linked to your Google account.

Traditionally, documents are digitally signed and verified using public-key infrastructure (PKI). Documents are verified by using a certificate authority signed certificate containing the author's public key. The certificate authority is the entity that assures that the signer is who the certificate says they are. Signetie exsists because certificate authorities charge a significate amount of money for a certificate, and they only remain valid for relatively short period of time, usually one year. This may not be practical for an open-source project, and is certainly a barier to the use of code-signing.

Signetie uses a similar approach, but instead of the certificate authority providing the assurance of identity, the signer's Signetie's account, linked to their Google account, provides some level of assurance of identity.

As a Signetie user, Signetie's primary function is to sign your public key and link it to your Google account. You create a public and private key-pair locally using any approprate means, including the SignetieDesktop application. As a result, the Signetie application does not know or store your private key. You can use the SignetieDesktop application to manage your key pair and sign documents. Signetie provides the Signetie-signed public key and identity, known as a "signed-signetie-identity-record," or SSIR.

The receipient of the document can use this SSIR to validate the document as coming from you, or specifically, coming from the owner of the Google account the signature is associated with.

Signetie is alpha software and no assurance is provided to its suitability for use. However, the project is open-source, so you are encouraged to examine the software to determine its suitability. If you identify issues with Signetie, please send this as feedback [provide link].

Signetie is built on Google App Engine, and it relies on this platform for its functionality, ie. it is not useful outside of this environment. There are costs associated with running the application, and as it is still alpha software, the mechinisms for making the project self-supporting have not been worked out. If the service is unavailable, please make a support request [provide link]. Any assistance in this regard would be welcomed.

The intended purpose of Signetie is only that of signing/verifying documents and not for encrypting/decrypting documents.

Thank you for your interest in Signetie.

About

Signetie is a electronic signature application that relies on the user's Google+ identity as the signature authority.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published