Signing with your wallet

A Level 1 proof shows that some content existed when DigiStamp recorded it, but not who it came from. Signing adds that: your DigiByte wallet makes a signature with one of its addresses, and DigiStamp checks it before recording the proof as signed. The certificate then shows that address under Signed by, and the proof moves to Level 2.

A signature shows that whoever controls that address signed. It does not say who that person is in the wider world, unless they have told people the address is theirs.

You need to be signed in to create and sign a proof. DigiStamp has one account for every product, Proof included, and no email addresses or passwords: you sign in with Digi-ID at id.digistamp.co.

1. Choose Sign in with Digi-ID. A one-time code appears.
2. On a phone, tap the link to open your DigiByte wallet. On a computer, scan the code with your wallet.
3. Approve the request in your wallet. You come back to the page you started from, signed in.

The same sign-in works on Assets, Signal, Tickets and Contracts.

Open the proof from My proofs. Under Wallet signature, choose how to sign:

• With a Digi-ID wallet: choose Sign with my wallet, then scan the QR code with your wallet, or on the phone your wallet is on choose Open my DigiByte wallet, and approve it. The page records the signature by itself.
• With a desktop wallet’s signed-message tool (DigiByte Core): only if that wallet holds the address you signed in with, which a phone Digi-ID wallet never does. Choose Paste a signature instead, copy the message shown, sign it in your wallet’s Sign message tool with the address the page names (the address you signed in with), paste the signature back, and attach it.

A signing request is good for five minutes. If it runs out, choose the button again for a new one.

Each signing request names this proof and is issued once:

• With a Digi-ID wallet, the wallet signs a digiid:// request that names this proof and a one-time code. The address recorded as the signer is the wallet’s Digi-ID address for the Proof site. Digi-ID wallets use a different address for each site, so it can differ from the address you signed in with.
• With a signed-message tool, you sign a message of this form, with your sign-in address:

prooflink:sign:<proof fingerprint>:<date and time>

DigiStamp accepts a signature only over the exact request it issued for that proof, within its five minutes, and each request works once, so a signature cannot be moved to a different proof or used twice.

The signature, the signing address and the exact signed message are kept with the proof, shown on its certificate and included in its downloads, so anyone can check the signature with DigiByte Core’s verifymessage command. See Checking the signature yourself.

• Only the proof’s owner, the account that created it, signed in, can sign it.
• A proof is signed once. A signed proof cannot be signed again, by you or anyone else.
• A revoked proof cannot be signed.

Signing in and signing a proof are free. Your wallet only signs a message: nothing is sent and no coins move.