Gruber, Florian (ext) schreef op 27/05/2014 16:16:
> Why exactly would digital signatures in PDFs based on specs prior to v1.7 no 
> longer considered to be safe?

Some types of signatures have been deprecated in ISO-32000-1. Some more 
will be deprecated in ISO-32000-2.
Some countries refuse to accept SHA-1 as hashing algorithm because 
serious flaws have been found.
Some countries also require a minimum keylength for the encryption 
algoritm as computers have become more powerful over the years.

To make a long story short: a digital signature that was "state of the 
art" 10 years ago may no longer be safe today.
Please read pages 14, 25, 26 and 28 of 
http://itextpdf.com/book/digitalsignatures
Especially the WARNINGs on page 28.

------------------------------------------------------------------------------
The best possible search technologies are now affordable for all companies.
Download your FREE open source Enterprise Search Engine today!
Our experts will assist you in its installation for $59/mo, no commitment.
Test it for FREE on our Cloud platform anytime!
http://pubads.g.doubleclick.net/gampad/clk?id=145328191&iu=/4140/ostg.clktrk
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to