https://bugs.documentfoundation.org/show_bug.cgi?id=120499

--- Comment #5 from Justin L <jl...@mail.com> ---
(In reply to Justin L from comment #3)
> Currently, it exports OK to both doc and docx (except that it doesn't export
> the password).
So, from a theoretical perspective, it would probably be a very bad thing to
take the password implementation of LibreOffice and export it into .doc's
lKeyDocProt password because that is very weak encryption. That would allow
someone to take a confidential .odt file, export to .doc and then easily be
able to crack the password.

However, that is NOT what OP was suggesting. They are only asking for the
compatibility flag PROTECT_FORM to be connected to the .doc* password. This
would not be a security concern. The passwords exist in the InteropGrabBag, and
so could be checked, or re-written.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to