Dnia 30.05.2023 o godz. 20:55:46 postfix--- via mailop pisze: > > If I may respectfully encourage you to look at how you receive your > online banking statements, most likely they are delivered by a > system that is conceptually pretty much like DJB described it back > then.
I receive mine via e-mail, end-to-end digitally signed with S/MIME. In addition, I get a monthly statement in traditional way, on paper. In similar way I get for example invoices from my phone provider or my ISP. In this case I don't get them on paper, because I agreed to electronic-only delivery (there's a discount for this ;)). I can still download them from their website of course, but the invoice comes as PDF attachment to e-mail. In addition to the whole message being S/MIME signed, the PDF itself is also signed as the PDF format allows for this. My electricity and gas providers send me an email with a notification that I can download full invoices from their website, but the email itself (unsigned in this case) contains all the important details, ie. the amount to be paid, account number the money should be transferred to and the date the payment is due, so I don't actually need to see the full invoice, unless I need it for some legal reasons. My insurance company sends me yearly update letters as PDF attachments to email, and neither the email nor PDF are signed (although PDF is encrypted, but the encryption key is trivial as it is derived in a known way from my personal data). I can still download the PDF from their website as well. > The main advantage for the financial institution is > proof on the balance of probability of the timestamp and statements > that have been delivered to the customer. I agree that the main reason for providing documents via website and not via email is the fact that server logs can give a proof that you have actually downloaded the document, while there is no sure method to confirm that you have received - and opened - an email message. But you don't always need a proof that the recipient has received a message. If the bank is sending you statements via normal, unregistered paper mail (as all banks, without exception, do in my country - nobody sends via registered mail), it also has no proof that the message has been delivered. They don't need it. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub." _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
