https://community.isc2.org/t5/Industry-News/PDF-encryption-and-signing/m-p/28535#M3516 <P>Well, you may be used to getting invoices and payments in PDF files, secure in the knowledge that they are digitally signed and therefore safe.</P><P>&nbsp;</P><P><A href="https://pdf-insecurity.org/#how-to-break-pdf-encryption-september-2019" target="_blank" rel="noopener">Well, not exactly</A>.</P><P>&nbsp;</P><P>(If you read the details of the attack, you can see that they aren't exactly changing the signed content, but you'd have to be really familiar with (and check) the internal format of the PDF file in order to determine that a visible change has been made.)</P> Mon, 30 Sep 2019 18:13:26 GMT rslade 2019-09-30T18:13:26Z https://community.isc2.org/t5/Industry-News/PDF-encryption-and-signing/m-p/28535#M3516 <P>Well, you may be used to getting invoices and payments in PDF files, secure in the knowledge that they are digitally signed and therefore safe.</P><P>&nbsp;</P><P><A href="https://pdf-insecurity.org/#how-to-break-pdf-encryption-september-2019" target="_blank" rel="noopener">Well, not exactly</A>.</P><P>&nbsp;</P><P>(If you read the details of the attack, you can see that they aren't exactly changing the signed content, but you'd have to be really familiar with (and check) the internal format of the PDF file in order to determine that a visible change has been made.)</P> Mon, 30 Sep 2019 18:13:26 GMT https://community.isc2.org/t5/Industry-News/PDF-encryption-and-signing/m-p/28535#M3516 rslade 2019-09-30T18:13:26Z