Posted by DL on
URL: https://discuss.orbeon.com/Electronic-Signatures-tp3171562p3175153.html

The problem with the solutions proposed above is that images of attached digitised (analogue) signatures can easily be forged.

Some long time ago I worked on dynamic signature verification  .. i.e. biometrics.
But dynamic signature verification (using signature capture pads) is not really practical or secure in an internet environment.

Today I would look at http://www.bouncycastle.org .. java api .. and integrate digital crypto signatures (not analogue signatures) into orbeon server.