Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Most of our interaction with digital signatures is indeed transparent.

You are viewing a website right now with a certificate stating this is news.ycombinator.com signed by someone in your OS trust store.

I can just make a certificate saying a different website is news.ycombinator.com. What I can’t do (hopefully) is get it signed. You will have a very different UX when I do this.

Even though I can easily make an unsigned document, the digital signature in the certificate still has value, just like the NFT.



You can’t automate checking NFT certificates because they are all “real” and valid NFTs. The fact that the one you have wasn’t signed by the person who created the picture isn’t something cryptographically or even technically possible.


Yes you can can. If someone says they have a Beeple, and signed by someone other than Beeple, they don't have a Beeple.

Same way as if I receive a 'real and valid' message claiming to be you, but not signed by you, I can't say it was you that sent me the message.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: