In theory Acrobat doesn't care but in practice, at least with Acrobat 6, if
the byte range has more than one exclude section it always fails. Other
Acrobat plug-in may behave differently but with the standard crypto that's
what I see.

----- Original Message ----- 
From: "Leonard Rosenthol" <[EMAIL PROTECTED]>
To: "Paulo Soares" <[EMAIL PROTECTED]>; "Juan Sanchez"
<[EMAIL PROTECTED]>; <itext-questions@lists.sourceforge.net>
Sent: Thursday, August 11, 2005 8:45 PM
Subject: Re: [iText-questions] Add signatures in a existing blank signature


> At 12:36 PM 8/11/2005, Paulo Soares wrote:
> >As I said, if you want Acrobat to verify the signature you can only
exclude
> >the Contents from the byte range.
>
>          Assuming that is what is being hashed and marked as such.
>
>          You can actually exclude anything you want - and as long as
> your byte ranges and hashes match, Acrobat doesn't care what you've
excluded.
>
>          It is, however, a potential security hole to exclude
> anything else - but there may be good reason.
>
>
> Leonard
>
>
>
> --------------------------------------------------------------------------
-
> Leonard Rosenthol
<mailto:[EMAIL PROTECTED]>
> Chief Technical Officer                      <http://www.pdfsages.com>
> PDF Sages, Inc.                              215-938-7080 (voice)
>                                               215-938-0880 (fax)
>



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions

Reply via email to