What we do
Use it
Why us
FAQ
- Is the signature legally
binding?
Generally - yes, but this depends on your specific country regulations. The digital signature generated by mailwitness guarantees immutability, verifiability, cannot be reused between documents and is placed only after confirming one's identity via ensuring that they control the given email address. - How safe are the
signatures?
In short - as safe as your email with added guarantee of immutability and irrefutability. Mailwitness does not verify that the email address owner is who they claim to be (just like most of our competitors) - we verify that whoever had control over your email addresses made an explicit decision to sign the document. After the signature is generated, any change to the document will invalidate the signature. - How do you protect against email
spoofing?
We only sign a document in the name of the holder of the email address after having verified that the e-mail they sent us has a valid DKIM signature or after they have proven to us that they can also receive emails on the given address. - What is backdating
protection?
Whenever we sign a document in your name, we also initiate a process to put a small amount of opaque data into a Bitcoin transaction. When that transaction is made (usually after some hours), you receive an additional file from us. That file contains cryptographic information, which allows anyone to prove that your signature was placed before the mentioned Bitcoin transaction. Due to the nature of Bitcoin, nobody has the power to erase that from Bitcoin's history. You can read more about it at https://opentimestamps.org/. - Why does Adobe Reader show
your signature as unverified?
Generating signatures which would pass Adobe's verification is expensive. At this point we cannot afford paying for it and giving it away for free. We may create a paid version in the future which will pass Adobe's test. This does not make the signature less useful, though. In order to verify it, you can use other external services, e.g. https://verifysignature.eu/ or Polish goverment verifier. - How do I know that the person
behind an email address is really who they claim?
You need to establish it by yourself. There is no central email address book, so the appropriate way depends on the circumstances. You may verify it by phone, you may know it from previous interactions, you may just assume that the domain holder verified it (e.g. if it's a company email). In the future, we will likely add ways to address this, e.g. by adding support for using national electronic identity cards.
Contact Us
Mailwitness was founded, created and is supported by
Unoperate.
We would love to hear from you at
mailwitness@unoperate.com.
Please report any abuse to
mailwitness-abuse@unoperate.com.