[Libreoffice-bugs] [Bug 144555] Inadvertent security leakage path from encrypted LO docs via Add To Dictionary

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=144555

Mike Kaganski <mikekaganski at hotmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |NOTABUG
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #1 from Mike Kaganski <mikekaganski at hotmail.com> ---
(In reply to R. Bingham from comment #0)
> https://help.libreoffice.org/7.2/en-US/text/shared/guide/protection.
> html?DbPAR=SHARED#bm_id3150620 on protecting docs (or portions thereof) with
> passwords and LO encryption has a warning "Information entered in File -
> Properties is not encrypted. This includes the name of the author, creation
> date, word and character counts." but is silent regards Add To Dictionary
> actions resulting in un-protected data.

The cited excerpt is about the *part of the encrypted document* that is kept
unencrypted *in that document*. What you are talking about is copying some word
from one document (which you encrypted) into another (a dictionary), that is
completely different, and indeed is not encrypted. It's like you having a book
that you keep in a safe, and a notebook where you put unknown words. It's
reasonable to understand that the book and notebook are different entities. The
same would happen if you copied the word and pasted into a different ODT - that
ODT would not become encrypted because of that.

I find it unreasonable to put a note for each and every obvious case, like
"adding to dictionary"; "copying to another document"; "pasting into an email",
etc.

The dictionary is kept in user profile (as you correctly identified, and as
described in [1]). This is not a bug.

[1] https://wiki.documentfoundation.org/UserProfile

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20210916/0b73dc5b/attachment-0001.htm>