—BEGIN PGP SIGNED MESSAGE—
Hash: SHA1

I'm as big a fan of the possibilities of digital signatures as the next guy; I've been using them-and encryption-for years. Listen to all the hype about how digital and electronic signatures are going to revolutionize the way insurance is sold. People seem to think they're going to help clear the last major hurdle to completely electronic sales. They'll allow policies to be bound anywhere, anytime.

Yeah, right.

This is a case of the software getting ahead of the 'meatware'-the users. Sure, the tools to implement digital signatures are there, but there are significant obstacles in the way of it becoming more than a novelty. That isn't to say that all-digital policies won't happen, but that, even though we've solved the technological and legal problems (to one extent or another), the implementation problems loom large.

First, although there is-in theory, if not in practice-a standard for digital signatures (X.509), the implementation of that standard is clunky and confusing at best.

Let me explain. I've used PGP since the early '90s, first in its DOS implementation, then the Windows version, and now as an e-mail plug-in as well. (My public key is at www.kantor.com/pgp.) But I do not have an X.509 certificate. The process of getting one from a certification authority (CA) isn't clear in either the PGP documentation, my Eudora Pro documentation, or my Outlook documentation (if I decide to clunk along with that). I like to think I'm a pretty bright guy, and I'm sure I could figure it out if I felt the need, but it never seems worth the bother. What does seem clear is that I have to pay for a certificate, although some CAs offer limited versions for free.

And thus we see three significant problems with digital signatures: You need to go and get one (a written signature is 'built in'); you probably need to pay for it; and you need to install it and hope it works. Further, while your written signature remains the same, if you change jobs your signature changes and old versions have to be revoked. Messy.

Written signatures are with us from when we first learn cursive writing. Until digital signatures are standardized and built in to applications-and the certification process is transparent and free-digital signatures simply won't be useable by customers. There will certainly be other options. Electronic signatures, which are digitized versions of handwriting, are already in widespread use in department stores and by delivery services. (Although the idea that Sears and UPS now have a clear image of my signature for easy cut-and-paste doesn't thrill me.) So are other electronic tools for verification, such as a credit card number to make sure a buyer is over 18. But widespread use of PGP-esque signatures? Don't hold your breath.

—BEGIN PGP SIGNATURE—
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
iQA/AwUBOwJ8Td9+0kgapwLrEQJ15wCcCCe3F2nCDi8Cju/7T/rB5g7f6j8An1FH
RHTwFSM3sEsorfnVdGFvE3Dl
=q3LU
—END PGP SIGNATURE—

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.