I am building a website for what I hope will eventually be a small business.I am building a website for what I hope will eventually be part of a small business. I want to sign/maintain documents digitally ifsuch that they have a legal meaning.
GnuPG (GPG) is free and open-source and it has the ability to both digitally sign and encrypt things (things being messages, documents, files, etc). Would a GPG key be a legitimate or legally accepted signature in the US (primarily) and the world?
I know that there are software like Adobe E-sign or GlobalSign, that I think professional companies use, but since I am independent at this time, and this siteGPG is a startup, I want to keep my costs real lowfree. since I am independent at this time, and this site is a startup, I want to keep my costs real low.
Some things (among potentially many) I would like to be able to do with GPG include:
- Sign contracts (say between a consultant and me for employment for 'x' hours at 'y' pay).
- Show that I have corporate documents, trademark, copyright, etc. at a specific date.
- Show that x, y, z parties have signed this document and is legally binding (assuming all these parties use GPG.
Is GPG legitimate/legal for use, for these purposes? Is GPG appropriate for small businesses? What best practices can I follow to use GPG effectively for legal purposes? What best practices can I follow to use GPG effectively for legal purposes?
Do the gpg keys need to be published on all key servers? Or can they be posted on just one (some key servers such as the new keys.openpgp.org servers which use the Hagrid system don't propagate to older servers).
Thank you for the advice.