[ 
https://issues.apache.org/jira/browse/PDFBOX-4839?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17113057#comment-17113057
 ] 

Tilman Hausherr commented on PDFBOX-4839:
-----------------------------------------

I looked at the code: in the trunk and 2.*, when the owner password is empty, 
the user password is taken as the owner password. The 1.8 version hasn't got 
this, so I added it. However you should use the 2.0.* version, and use strong 
encryption, i.e. not 40 bit, rather 256 bit encryption. IIRC this is the 
default in 2.0.*.

> Iphone IOS able to open password PDF file without password
> ----------------------------------------------------------
>
>                 Key: PDFBOX-4839
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-4839
>             Project: PDFBox
>          Issue Type: Bug
>          Components: Crypto
>    Affects Versions: 1.8.16
>         Environment: Latest version of Apple IOS on Iphone 8s
>            Reporter: Warren Nash
>            Priority: Minor
>              Labels: security
>   Original Estimate: 4h
>  Remaining Estimate: 4h
>
> Able to create encrypted password PDF file.
>  # Able to use password PDF file on PC by entering password
>  # Able to use password PDF file on Android Phone by entering password
>  # Apply IOS open PDF file and then can see all contents of PDF file.  No 
> password is required.
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to