Is cloud signature secure?

The signature in the cloud is characterized because the digital certificate is hosted on a secure server (HSM), and the user accesses it when he wants to sign a document digitally.

The fact that the certificate is not physically installed on any device increases its security. If the certificate is on a device where, as a rule, passwords are stored, it is relatively easy for someone else with access to the device to sign for us. However, at least two factors of authentication are required to use the signature in the cloud.

The two identification procedures can be:

• Something that “the user knows” (password).
• Something that “the user has” (key cards, SMS OTP, mail OTP)
• Something that “the user does or is” (signature, voice, fingerprint, iris and other biometric factors).