[okular] [Bug 470751] New: Process of adding digital certificates is unintuitive and cumbersome

[Nate Graham]

https://bugs.kde.org/show_bug.cgi?id=470751

            Bug ID: 470751
           Summary: Process of adding digital certificates is unintuitive
                    and cumbersome
    Classification: Applications
           Product: okular
           Version: unspecified
          Platform: Other
                OS: Linux
            Status: REPORTED
          Keywords: usability
          Severity: normal
          Priority: NOR
         Component: PDF backend
          Assignee: okular-devel at kde.org
          Reporter: nate at kde.org
  Target Milestone: ---

Right now to be able to digitally sign a document, you need to add one or more
digital certificates. If your digital certificates are not found in the default
location (your Firefox profile), the process of adding them is as follows:

1. Go to Settings menu > Configure backends > PDF
2. Change the value of "Certificate database" from "Default" (which shows the
Firefox profile) to "Custom"
3. Click the "choose" button to select the location where your digital
certificates live. If you have any certs that don't live there, move them there
manually in another app
4. Notice that the "Available certificates" table hasn't gotten updated to show
the certificates in that folder and become confused
5. Figure out that you need to click the Apply or Ok button to refresh it
6. After being notified that this change requires Okular to be restarted,
restart Okular
7. Go to Settings menu > Configure backends > PDF again and verify that the
certificate(s) you expect to be there is/are there

Needless to say, this process is quite taxing on the user and they are probably
not likely to figure it out on their own without assistance or being explicitly
pointed to excellent documentation.

There are various ways this could be improved, but I think a good one would be
to ask the user to choose a certificate at the moment they ask Okular to
digitally sign the document. Once they choose it, it would be automatically
copied to a new custom certificate folder (which would be created somewhere if
needed), nd then Okular would not need to be restarted, and then they would
immediately be able to sign with it. In the digital signing dialog, they would
be able to add a new certificate from there, to avoid having to go into the
Configure Backends window at all, ideally.

-- 
You are receiving this mail because:
You are the assignee for the bug.