Are Digital Signatures legally valid? Do keys need to be published?
<p>GnuPG (GPG) has the ability to both digitally sign and encrypt things (things being messages, documents, files, etc.).  Is a public-key signature legally valid?</p>
<p>If so, do the public keys need to be published on all key servers to remain legally effective?  Or can they be posted on just one (some key servers such as the new keys.openpgp.org servers which use the Hagrid system don't propagate to older servers).</p>

<p>An electronic signature does not have to be cryptographically based at all to be legally valid in <a href="/questions/tagged/united-states" class="post-tag" title="show questions tagged &#39;united-states&#39;" rel="tag">united-states</a> law. There are no US laws that I can find specifying this level of detail on what makes an electronic signature valid. A particular contract might specify what key servers are requited.</p>
<p><a href="https://www.bakermckenzie.com/en/insight/publications/2020/03/the-law-esignatures-us-canada" rel="nofollow noreferrer">The Law of E-Signatures in the United States and Canada</a> (an article published by the law firm of Baker And Mckenzie) says:</p>
<blockquote>
<p>The E-Sign Act is a federal law that applies to interstate commerce, namely transactions across states of the United States and with foreign nations. ... UETA provides a framework for states to enact state law concerning the enforceability of e-signatures and the validity of electronic records. Forty-seven states and the District of Columbia, Puerto Rico and the US Virgin Islands have adopted some form of UETA.</p>
</blockquote>
<blockquote>
<p>In general terms, both the UETA and the E-Sign Act define an &quot;electronic signature&quot; as &quot;an electronic sound, symbol, or process attached to or logically associated with a record and executed or adopted by a person with the intent to sign the record&quot; and an &quot;electronic record&quot; as a record that is &quot;created, generated, sent, communicated, received, or stored by electronic means&quot;. UETA and the E-Sign Act provide that: (a) a record or signature may not be denied legal effect or enforceability solely because it is in electronic form; (b) a contract may not be denied legal effect or enforceability solely because an electronic record was used in its formation; (c) if a law requires a record to be in writing, an electronic record satisfies the law; and (d) if a law requires a signature, an electronic signature satisfies the law.</p>
</blockquote>
<p><a href="https://www.law.cornell.edu/uscode/text/15/7001" rel="nofollow noreferrer">15 U.S. Code § 7001</a> (part of the ESIGN act) provides that:</p>
<blockquote>
<p>(a) In generalNotwithstanding any statute, regulation, or other rule of law (other than this subchapter and subchapter II), with respect to any transaction in or affecting interstate or foreign commerce—</p>
</blockquote>
<blockquote>
<p>(a) (1) a signature, contract, or other record relating to such transaction may not be denied legal effect, validity, or enforceability solely because it is in electronic form; and</p>
</blockquote>
<blockquote>
<p>(a) (2) a contract relating to such transaction may not be denied legal effect, validity, or enforceability solely because an electronic signature or electronic record was used in its formation.</p>
</blockquote>

<p><a href="/questions/tagged/australia" class="post-tag" title="show questions tagged &#39;australia&#39;" rel="tag">australia</a></p>
<h2>It depends on the use</h2>
<p><a href="https://www.docusign.com/how-it-works/legality/global/australia#:%7E:text=eSignature%20Legality%20Summary,in%20a%20physical%20paper%20document." rel="nofollow noreferrer">Docusign</a> (who are in the business of E-signatures has a pretty good summary:</p>
<blockquote>
<p>Use cases where an SES is typically appropriate include:</p>
<ul>
<li>HR documents, such as employment contracts and other new employee onboarding processes</li>
<li>certain commercial agreements, including NDAs, procurement documents, sales agreements
certain consumer agreements, including terms and conditions of sale</li>
<li>certain real estate documents, including lease agreements, purchase and sales contracts; other related documentation for residential and commercial real estate</li>
<li>non-exclusive license of intellectual property</li>
</ul>
</blockquote>
<blockquote>
<p>Use Cases That Are Not Typically Appropriate for Electronic Signatures or Digital Transaction Management</p>
<p>Use cases that are specifically barred from digital or electronic processes or that include explicit requirements, such as handwritten (e.g. wet ink) signatures or formal notarial process that are not usually compatible with electronic signatures or digital transaction management.</p>
<ul>
<li>statutory declarations requiring a witness (excluded from ETA)</li>
<li>powers of attorney in certain States/Territories (Powers of Attorney Act 2014 (Vic) s 33)</li>
<li>wills, codicils and other testamentary instruments (excluded from ETA and notarization required by Succession Act 2006 (NSW))</li>
<li>bills of exchange</li>
<li>the signature, lodgement, service and filing of documents in connection with legal proceedings in certain States/Territories</li>
<li>certain documents under legislation relating to health insurance, life insurance and general insurance</li>
<li>certain documents, notices, and consents used in connection with the provision of credit related services under the National Consumer Credit Protection Act 2009 (Cth)
transfers of intangible property, such as intellectual property</li>
<li>official Commonwealth documents such as passports</li>
</ul>
</blockquote>
<p>I will also add that certain documents to be executed by corporations such as loans and guarantees must normally have wet-ink signatures but the law has been temporarily amended during the current pandemic to allow E-signing - this may become permanent. Similarly, loan guarantees have been found to be unenforcable when they have been E-signed.</p>
<p>Where they are valid, they do not need encryption.</p>

signature