On Fri, 2005-09-16 at 19:06 +0200, cono wrote:
> G. Roderick Singleton wrote:
> 
> > On Fri, 2005-09-16 at 15:04 +0200, cono wrote:
> >>You're right Niklas, that there is no security from password protected
> >>workbooks. Just unzipping the file, is enough to find the contents.
> >>It might of course, be a little barrier to prevent people having access 
> >>right away.
> >>Furthermore, one could wonder why bothering about password protection of 
> >>workbooks/sheets at all, if the protection is a bit of useless.
> > 
> > 
> > Considering the content.xml is encrypted when any OOo file is saved with
> > password, I do not see how unzipping does anything. Please explain.
> > 
> Hi Ger,
> 
> That's right for file-protection, not for sheet/workbook protection 
> (Tools|Protect document|...)
> 
> 
> >>Beside that, I've thought about another way, convenient for Calc, to 
> >>reach a fine level of security:
> >>a - put data/formula's, vital for using the document, in macro's, and 
> >>let the user start those by a button;
> >>b - password protect that library (can't be the Standard-lib).
> >>
> >>As far as I've found, this is secure (conversion to xls does not convert 
> >>the macro's). If anyone has any doubt, pls let me know ;-)
> 
> > If you save in a foreign, proprietary format for which there is no API
> > please explain how OOo should export its security features. I think this
> > is neither a possible nor reasonable expectation. OOo docs, protected
> > with digital signatures and encrypted seem very safe to me.
> 
> Nor the password protection is exported, nor the macro-code...
> And if using the macro-code is essential for benefiting a spreadsheet, 
> password protection of the library indeed ìs an effective protection.
> 

Which what digital signing is supposed to do. Doesn't it?
-- 
PLEASE KEEP MESSAGES ON THE LIST.
OpenOffice.org Documentation Co-Lead
http://documentation.openoffice.org/ 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to