You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@pdfbox.apache.org by "Tilman Hausherr (Jira)" <ji...@apache.org> on 2026/08/26 10:01:00 UTC

[jira] [Created] (PDFBOX-6244) Clarify that parsing doesn't check signatures

Tilman Hausherr created PDFBOX-6244:
---------------------------------------

             Summary: Clarify that parsing doesn't check signatures
                 Key: PDFBOX-6244
                 URL: https://issues.apache.org/jira/browse/PDFBOX-6244
             Project: PDFBox
          Issue Type: Improvement
          Components: Documentation
            Reporter: Tilman Hausherr


Clarify that parsing doesn't check whether any signatures are valid, and that loading a manipulated / "updated" PDF will not fail parsing. This applies to certification constraints as well. This behavior is not a security flaw, it's a missing feature. The ShowSignature example offers a limited signature check. The gold standard is Adobe Reader.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org