See this site: www.docusign.com. This service seems to generate online the necessary keys for digitally signing documents and stores those keys for users on their servers. Isn't this a broken scheme as the private keys were never in the possession of user? Will non-repudiation be applicable to such signed documents?