incubator-ooo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andre Fischer>
Subject Re: [RELEASE,CODE]: Bug 119090 - Default Encryption Fails for Down-Level Implementations
Date Fri, 23 Mar 2012 10:47:29 GMT

there has been a longer discussion about this in the issue ([1]), most 
of it very technical.  I previously thought that this is not a show 
stopper but I changed my mind but more for usability than technical 
reasons:  I had expected that I could choose the encryption algorithm 
either in the save dialog or in the Tools->Options menu, but did not 
find a way to do it.  Without this choice the user has two options:

1. Save as ODF 1.1

2. Not use encryption

I don't find option 2 acceptable.  Option 1 requires users to know that 
this solves their problem, i.e. that ODF 1.1 uses another encryption 
method than ODF 1.2.  I did not know that before and assume that many 
others do not either.

I see this now as a severe problem, even as a show stopper.



On 19.03.2012 14:48, Jürgen Schmidt wrote:
> On 3/19/12 2:16 PM, TJ Frazier wrote:
>> On 3/19/2012 08:48, Jürgen Schmidt wrote:
>>> Hi,
>>> I think issue 119090 is no show stopper from my point of view. The new
>>> default provides a better security than before when I understand it
>>> correct. And if people detect potential problems they can save the
>>> document again with other settings.
>>> I agree that this is important for interoperability but no show stopper.
>>> Any other opinion?
>>> Juergen
>> Hi, Jürgen,
>> Like Dennis, I'm nervous about this. Perhaps we can handle it with a
>> mention in the Release Notes; something like,
>> PLEASE NOTE: the default options for [technical details here] should
>> provide your best /individual/ security. However, if you intend to share
>> the document in secure fashion, the default mode cannot be read by
>> * previous versions of
>> * current versions of LibreOffice, at least through [version]
>> * Ms Office [version info]
>> For compatibility, use the options [details here].
> I agree that it make sense to mention it in the release notes.
> Any volunteer for updating the release notes?
> Juergen

View raw message