[ 
https://issues.apache.org/jira/browse/PDFBOX-4839?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17113057#comment-17113057
 ] 

Tilman Hausherr edited comment on PDFBOX-4839 at 5/21/20, 10:47 AM:
--------------------------------------------------------------------

I looked at the code: in the trunk and 2.0.\*, when the owner password is 
empty, the user password is taken as the owner password. The 1.8 version hasn't 
got this, so I added it. However you should use the 2.0.\* version, and use 
strong encryption, i.e. not 40 bit, rather 256 bit encryption. IIRC this is the 
default in 2.0.\*.


was (Author: tilman):
I looked at the code: in the trunk and 2.0.*, when the owner password is empty, 
the user password is taken as the owner password. The 1.8 version hasn't got 
this, so I added it. However you should use the 2.0.* version, and use strong 
encryption, i.e. not 40 bit, rather 256 bit encryption. IIRC this is the 
default in 2.0.*.

> Iphone IOS able to open password PDF file without password
> ----------------------------------------------------------
>
>                 Key: PDFBOX-4839
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-4839
>             Project: PDFBox
>          Issue Type: Bug
>          Components: Crypto
>    Affects Versions: 1.8.16
>         Environment: Latest version of Apple IOS on Iphone 8s
>            Reporter: Warren Nash
>            Priority: Minor
>              Labels: security
>   Original Estimate: 4h
>  Remaining Estimate: 4h
>
> Able to create encrypted password PDF file.
>  # Able to use password PDF file on PC by entering password
>  # Able to use password PDF file on Android Phone by entering password
>  # Apply IOS open PDF file and then can see all contents of PDF file.  No 
> password is required.
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org

Reply via email to