Jul 12 2020 05:51 PM
Jul 12 2020 05:51 PM
I have been using OneDrive mobile app to sign documents since early January 2020. This is completed via Markup Pen > Signature and Markup > Date feature.
However, for the past two weeks, I am surprised to come to know that my signature and date can be moved around / resized / even deleted after sync back to OneDrive cloud and view the document on laptop.
The recipients are able to do so at the same time from their end as well. The same issues also happened in iPad.
This has raised security concerns because signature and date are not supposed to be moved around after saved.
Please check and advise why this is happening.
Jul 12 2020 05:59 PM
@MargeLee Hi Marge. You must be sharing documents to the recipients with full Edit rights rather than read only.
If you are sending documents for them to sign - then you'll need to lock the documents with whatever the format allows so that they can only sign them. Or you will at least need to revoke edit rights after they've signed the document.
Jul 19 2020 05:48 PM
@Mike Williams Hi Mike, Allow me to detail the steps below for better explanation.
Let's take an example : Sending Document A.pdf to sign
I attached the sample document for your checking.
Please can you advise? Thank you
Jul 19 2020 06:09 PM
I am not (for safety reasons) going to open a document attached to a public forum.
If you look at your workflow, both you and the signer each have a link to or copy of the document with edit rights, so you can both do whatever you like to the document. If you want a secure transaction that locks the document then you need to use something like Adobe Sign.
Jul 19 2020 07:57 PMSolution
@MargeLee Hi Marge - personally I would only consider it for scenarios of high importance or to be compliant for some regulations if a copy of the signed document was transmitted back in an encrypted email or the document was otherwise locked down. You should not confuse an electronic ink signature with secure digital signature. They're both digital, and that's it; the e-ink signature could be re-used (or mis-used) by other people in the same way as scanned signatures, whereas a true digital signature is linked to your identity in stronger ways. See, for example: https://www.howtogeek.com/164668/how-to-electronically-sign-documents-without-printing-and-scanning-...
Note that this forum is a public self-help community. If you want advice from Microsoft then you'll need to raise a service ticket with them.