java.jago wrote:

>>Based on your story I don't see any reason why the
>>PDF should be encrypted. Don't encrypt the PDF and
>>do all client-server communication using SSL.
>>    
>>
>
>Well, I thought about that - I have my self-written ftp-upload manager 
>in java. I don't know if I can easily extend it with SSL.
>
>Moreover, I wanted to use encryption - because there may be cases, where 
>SSL is no option.
>
If the end-user chooses the owner password,
and you want the server to be able to open the PDF file,
there is no other option than to send the password
over the connection between the client and the server.
Without SSL, this is not a safe solution.

If you want to choose the owner password,
and you want this password to be used for
creating a PDF on the client side, you can
only protect this password 'psychologically'.
Meaning you can obfuscate it, but a hacker
will always be able to retrieve it.
br,
Bruno


_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions

Reply via email to