[Poppler-bugs] [Bug 16770] support for digital signatures

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=16770

--- Comment #103 from Markus Kilås <digital at markuspage.com> ---
(In reply to Albert Astals Cid from comment #102)
> So we're stuck on "need to use the offset" part, right?
> 
> Could someone try to do make the code use it even if we don't have any pdf
> that needs it?

I am not sure if it is good to apply the robustness principle on security
functions. In those cases it might be better to be defensive and reject
signatures not following the recommendation.

In this case if the ByteRange does not cover the whole document there could be
parts of the document that can be modified without invalidating the signature.
Would it then be good to tell the user that the signature has been validated
and the document is not modified even though in fact there are parts of the
document for which we don't know?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/poppler-bugs/attachments/20151128/340202ef/attachment.html>