https://bugs.documentfoundation.org/show_bug.cgi?id=158576
Bug ID: 158576
Summary: Improve macro signature confirmation dialog
Product: LibreOffice
Version: unspecified
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: UI
Assignee: libreoffice-bugs@lists.freedesktop.org
Reporter: samuel.mehrbr...@allotropia.de
Macro Security: High (default)
Open this file:
https://cgit.freedesktop.org/libreoffice/core/plain/xmlsecurity/test_docs/documents/valid_ooo3_2_doc_macro.odt
When opening this file (a document with a signed macro), you need to confirm
that you trust the author of the certificate (because only signed macros from
trusted sources/locations are allowed to run).
There is only a small hurdle to add the certificate to the list of trusted
certificates (Just check the "Always trust macros from this source" checkbox.
The user is not required to check the certificate for validity.
This should be improved. At the very least, the user should be required to
actually view the certificate before the checkbox is enabled.
Maybe relevant instructions/information about the certificate can also be added
to the dialog directly, instead of hiding it behind the "View certificate"
button.
--
You are receiving this mail because:
You are the assignee for the bug.
