Re: Commit: Password dialog


Subject: Re: Commit: Password dialog
From: Aaron Lehmann (aaronl@vitelus.com)
Date: Wed Oct 17 2001 - 17:58:40 CDT


On Wed, Oct 17, 2001 at 11:35:13PM +0100, Alan Horkan wrote:
> Question:
> is the password dialog generic enough to open password protected zip
> files? (i know that currently abiword uses gzip, but im talking about if
> and when abiword uses zip or gets a filter for Open Office)

I assume so, but IMHO this is a really bad idea. While what I hear
from Dom is that MS Word encryption is popular, I have never seen an
encrypted-zipped AbiWord document. Adding the functionality would
encourage its use. PKZip encryption is *badly* flawed, see Applied
Cryptography (breakable-in-a-couple-of-minutes-on-a-modest-computer
bad). It isn't the kind of standard we would want to encourage, or
even waste time implementing.

This paragraph on gzip.org sums up what I think is a very good
attitude to apply to abiword:

        Does gzip support encryption?

        No. Simple encryption algorithms such as that of PKZIP can be
        broken. And adding strong encryption such as that of PGP to
        gzip would not make much sense because that would duplicate the
        functionality of those encryption programs. PGP already
        incorporates the gzip compression code, so use PGP if you need
        compression plus strong encryption.



This archive was generated by hypermail 2b25 : Wed Oct 17 2001 - 17:58:55 CDT