[okular] [Bug 524588] PKI verification and signing for pdf documents

[Sune Vuorela]

https://bugs.kde.org/show_bug.cgi?id=524588

Sune Vuorela <kde at pusling.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kde at pusling.com

--- Comment #1 from Sune Vuorela <kde at pusling.com> ---
Hi Benson,

For the Aadhar validation of looking for a 'green checkmark' is actually using
a deprecated and discouraged pdf extension, so I'm unsure we will really ever
support it. (I've forgotten where it was discussed) - because the green
checkmark can easily be faked. Validation can be done with 'normal means' of
signature validation. 
But there is bascially 4 or 5 different descriptions for how to render that
area of the document, depending on signature validity. - but other than in
aadhar, haven't been used for decades. 
https://kbdeveloper.qoppa.com/support-multiple-entries-layers-in-the-appearance-stream-for-signatures/
It is likely doable for a determined developer to do it, but you likely need
some interested person from India who can actually test it. I wouldn't mind
help reviewing a human-made 'poppler' patch for this.

For signing, it looks like one needs to send either the document or at least
the checksum and do some server-phone-okular 3-way pingpong. 
This is not a concept currently supported in 'poppler' (the library we use for
pdf handling), so it will be a massive amount of work for a skilled person.
This is likely 'hire some human to do it'-work, if one should look at Nate's
old blog post:
https://pointieststick.com/2023/07/16/where-bugfixes-and-new-features-come-from/

I'm not as such against it, it could also be interesting for other countries
national signature things where a remote service also is involved, but it need
to be well designed and thought-out.

-- 
You are receiving this mail because:
You are the assignee for the bug.