Hi,

there has been a longer discussion about this in the issue ([1]), most of it very technical. I previously thought that this is not a show stopper but I changed my mind but more for usability than technical reasons: I had expected that I could choose the encryption algorithm either in the save dialog or in the Tools->Options menu, but did not find a way to do it. Without this choice the user has two options:

1. Save as ODF 1.1

2. Not use encryption


I don't find option 2 acceptable. Option 1 requires users to know that this solves their problem, i.e. that ODF 1.1 uses another encryption method than ODF 1.2. I did not know that before and assume that many others do not either.

I see this now as a severe problem, even as a show stopper.

Regards,
Andre



[1] https://issues.apache.org/ooo/show_bug.cgi?id=119090

On 19.03.2012 14:48, Jürgen Schmidt wrote:
On 3/19/12 2:16 PM, TJ Frazier wrote:
On 3/19/2012 08:48, Jürgen Schmidt wrote:
Hi,

I think issue 119090 is no show stopper from my point of view. The new
default provides a better security than before when I understand it
correct. And if people detect potential problems they can save the
document again with other settings.

I agree that this is important for interoperability but no show stopper.

Any other opinion?

Juergen


Hi, Jürgen,

Like Dennis, I'm nervous about this. Perhaps we can handle it with a
mention in the Release Notes; something like,

PLEASE NOTE: the default options for [technical details here] should
provide your best /individual/ security. However, if you intend to share
the document in secure fashion, the default mode cannot be read by
* previous versions of OpenOffice.org
* current versions of LibreOffice, at least through [version]
* Ms Office [version info]
For compatibility, use the options [details here].


I agree that it make sense to mention it in the release notes.

Any volunteer for updating the release notes?

Juergen

Reply via email to