Uploaded image for project: 'OASIS Open Document Format for Office Applications (OpenDocument) TC'
  1. OASIS Open Document Format for Office Applications (OpenDocument) TC
  2. OFFICE-2639 Prepare Deprection of Visible Hashed Copies of Passwords
  3. OFFICE-3505

Clean up *:protection-key and *:protection-key-digest-algorithm fixes

    XMLWordPrintable

    Details

    • Proposal:
      Hide

      1. In seciton 19.698.4 table:protected in <table:table>,

      Delete the paragraph
      """
      To avoid saving the password directly into the XML file, only a hash value of the password is stored within the table:protection-key attribute."
      """

      This statement is misplaced and is also obsolete. The reference to table:protection-key in the preceding paragraph of 19.698.4 is all that is required.

      2. In 19.700 table:protection-key-digest-algorithm, in the next-to-last paragraph, delete the phrase
      """
      , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies"
      """
      The provisions of the preceding paragraphs are complete and this statement is confusing as well as unnecessary (with my apologies.)

      3. In 19.853 text:protection-key-digest-algorithm, in the next-to-last paragraph, delete this phrase there too
      """
      , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies"
      """

      Show
      1. In seciton 19.698.4 table:protected in <table:table>, Delete the paragraph """ To avoid saving the password directly into the XML file, only a hash value of the password is stored within the table:protection-key attribute." """ This statement is misplaced and is also obsolete. The reference to table:protection-key in the preceding paragraph of 19.698.4 is all that is required. 2. In 19.700 table:protection-key-digest-algorithm, in the next-to-last paragraph, delete the phrase """ , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies" """ The provisions of the preceding paragraphs are complete and this statement is confusing as well as unnecessary (with my apologies.) 3. In 19.853 text:protection-key-digest-algorithm, in the next-to-last paragraph, delete this phrase there too """ , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies" """
    • Resolution:
      Hide

      1. In seciton 19.698.4 table:protected in <table:table>,

      Delete the paragraph
      """
      To avoid saving the password directly into the XML file, only a hash value of the password is stored within the table:protection-key attribute."
      """

      This statement is misplaced and is also obsolete. The reference to table:protection-key in the preceding paragraph of 19.698.4 is all that is required.

      2. In 19.700 table:protection-key-digest-algorithm, in the next-to-last paragraph, delete the phrase
      """
      , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies"
      """
      The provisions of the preceding paragraphs are complete and this statement is confusing as well as unnecessary (with my apologies.)

      3. In 19.853 text:protection-key-digest-algorithm, in the next-to-last paragraph, delete this phrase there too
      """
      , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies"
      """

      Show
      1. In seciton 19.698.4 table:protected in <table:table>, Delete the paragraph """ To avoid saving the password directly into the XML file, only a hash value of the password is stored within the table:protection-key attribute." """ This statement is misplaced and is also obsolete. The reference to table:protection-key in the preceding paragraph of 19.698.4 is all that is required. 2. In 19.700 table:protection-key-digest-algorithm, in the next-to-last paragraph, delete the phrase """ , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies" """ The provisions of the preceding paragraphs are complete and this statement is confusing as well as unnecessary (with my apologies.) 3. In 19.853 text:protection-key-digest-algorithm, in the next-to-last paragraph, delete this phrase there too """ , or an laternative procedure that is not based on storing passwords in any form, including hash-coded copies" """

      Description

      There was an important change that was missed when this issue was applied.

      There is also a clumsy wording (from me) that is not needed and can be removed.

        Attachments

          Activity

            People

            • Assignee:
              orcmid Dennis Hamilton (Inactive)
              Reporter:
              orcmid Dennis Hamilton (Inactive)
            • Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: