Swedish e-sign solutions - Skipping WYSIWYS

["Anders Rundgren" <anders.rundgren@telia.com>]

Dear list;

You may be interested in knowing how the Swedish tax authorities'
look on e-signing.

Since their information system backend wants signed XML, they
in their on-line apps show the user in an ordinary browser window,
an HTML view of the transaction in progress, and then let the signature
app. sign the XML which they don't show to the user as it is unintelligble.

They claim that What You See Is What You Sign (WYSIWYS) does
not work[*] and is unnecessary as they believe users trust the authorities.
What they did not consider is that download is not always that perfect
and that a user may forget what he or she did.  Without a proof it is a
little bit hard to claim that somebody did this or did that in case of doubt.

Anders Rundgren

*) There is no client software that does this properly.  And if there is, it
costs far too much to roll out on a citizen-market as well as being
proprietary.