https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38655

--- Comment #18 from David Cook <[email protected]> ---
(In reply to Ujwal from comment #16)
> Yes I think a poor mans DRM would be OK .... If the images cannot be
> downloaded that would be great. 

For what it's worth, more expensive DRM like Adobe's is already broken. An
knowledgeable user can easily use third-party software to strip DRM from files
protected by Adobe. The most secure part of the Adobe model is in delivering
content only to authorized users. 

In that way, the expensive DRM works in a similar way to the method proposed
above. These protections can prevent inexperienced/everyday users from
downloading the full content, but an experienced/knowledgeable user can work
around most security if they have enough time and energy.

But remember in both cases if the user has to be an authenticated authorized
user... that really mitigates a lot of the risk, especially if you record which
user is accessing which content. 

By having that audit log, you can then do some analysis to see if someone is
likely abusing the system. In theory, that audit log could have some privacy
concerns, but it's not dissimilar to the circulation tracking anyway, although
I'll note that can be anonymized. 

Anyway, hopefully that provides some insight into electronic document security.

At the end of the day, there are no absolute guarantees, but you can try to
limit the risk as much as possible by adding layers of security.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to