Comment by gruez

There's something I never understood about e-signature services: how are they legally binding? Why do we need them at all? The end users don't have control over any of the keys, so it all hinges on the e-signature service telling the truth. It's significantly less secure than say, S/MIME with a proper CA-signed certificate. Is the bar for legal "signatures" really that low?