Okay, so DocuSign seems to be quite close. For my idea you'd have to imagine DocuSign with:
- an OAuth(-like) API for other sites, e.g. Reddit, to sign micro-data on your behalf.
- the ability to retract signatures after time X and notify subscribers of that data of it.
- [optionally] a fraud detection algorithm to give advance warning of possible malicious usage (app compromised or your app password.)
- the ability to request confirmation of a signature before time X for cases where retraction after that moment is unaccaptable.
That would make it possible for webapps to have every interaction with it be provably performed by the user, turning it into a legally valid audit trail.
- an OAuth(-like) API for other sites, e.g. Reddit, to sign micro-data on your behalf.
- the ability to retract signatures after time X and notify subscribers of that data of it.
- [optionally] a fraud detection algorithm to give advance warning of possible malicious usage (app compromised or your app password.)
- the ability to request confirmation of a signature before time X for cases where retraction after that moment is unaccaptable.
That would make it possible for webapps to have every interaction with it be provably performed by the user, turning it into a legally valid audit trail.