Encrypted Pdf is secure - but how do I keep people from stealing my password ?
- From: "java.jago" <java.jago (at) gmail.com>
- Date: Wed, 14 Jun 2006 20:21:07 +0200
> If you want to choose the owner password,
> and you want this password to be used for
> creating a PDF on the client side, you can
> only protect this password 'psychologically'.
> Meaning you can obfuscate it, but a hacker
> will always be able to retrieve it.
Thanks,
Actually the program would do everything - the user is not prompted for
a password. The pdf should also be save from him! That's also a reason
why I can't use an unencrypted pdf and SSL - this would the user just to
read it from his disk, if he figures out where it is stored.
I believe Zelix Klassmaster encrypts Strings in Java - so
"password_Example" becomes "F43Jff§234554"
However - this is just done to distract people who decompile the code
and who want to understand what the code is doing by looking at the Strings.
The key to decrypt these Strings again however, can probably obtained by
the hacker, I guess.
Well, in conclusion I agree with you that there is no workaround - I
just can't store the password on the client, because it could be
retrieved from there. I just hoped somebody has a genius idea...
Cheers,
jago
_______________________________________________
iText-questions mailing list
iText-questions (at) lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions