https://bugs.documentfoundation.org/show_bug.cgi?id=93389

            Bug ID: 93389
           Summary: Document recovery strips encryption
           Product: LibreOffice
           Version: 4.4.5.2 release
          Hardware: Other
                OS: All
            Status: UNCONFIRMED
          Severity: major
          Priority: medium
         Component: filters and storage
          Assignee: libreoffice-bugs@lists.freedesktop.org
          Reporter: freedesk...@nuclearsunshine.com

When recovering an encrypted document, LibreOffice asks for the password to
decrypt the original, then "forgets" that is encrypted.

Subsequently saving the document saves it without encryption, without warning.

This can very easily lead to silent stripping of the password on the recovered
document, which will go un-noticed unless/until the user subsequently opens the
document and also realises that they were not asked for a password.

I'm assuming that when LO opens an encrypted document it caches the password
for subsequent saving; in this case it should be possible to also cache at the
point of opening/decrypting the original during recovery.

Given that this results in silent loss of encryption I have set the issue
severity to major.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to