Re: Drop the Copyright Assignment requirement for Emacs

[Yuri Khan]

On Tue, 19 May 2020 at 12:27, Philippe Vaucher
<address@hidden> wrote:

> Please, I said 3 times already that YOU JUST TYPE YOUR NAME ON YOUR
> KEYBOARD, or attach an image. Yes, that's how I did in in Adobe Sign
> (just typed "Philippe Vaucher" on my keyboard). The only thing it did
> is the name was displayed using a hand-written font. Surely this
> cannot be complicated to duplicate. I already said all this.

OK, that is very convenient for the signer, but how can the recipient
of such a signed document verify this signature? If it is taken at
face value, I can’t see anything that prevents an adversary from
typing your name and signing away some of your possessions.

With hand-written signatures, the assumption is that your signature is
sufficiently complex that another person cannot duplicate it in a way
that a graphologist wouldn’t detect. With GPG, the assumption is that
you control your private key and that it cannot be brute-forced in a
realistic time frame.