Update notes on API changes for weak crypto

This commit is contained in:
Jay Berkenbilt 2021-11-16 17:10:00 -05:00
parent f9fc57d24c
commit a63623adce
1 changed files with 6 additions and 1 deletions

7
TODO
View File

@ -193,7 +193,12 @@ Comments appear in the code prefixed by "ABI"
creation of files with insecure crypto. Maybe
QPDFWriter::allowWeakCrypto. Call this when --allow-weak-crypto is
passed and probably also when copying encryption by default from
an input file.
an input file. There should be some API change so that, when
people recompile with qpdf 11, their code won't suddenly stop
working. Getting this right will take careful consideration of the
developer and user experience. We don't want to create a situation
where exactly the same code fails to work in 11 but worked on 10.
See #576 for latest notes.
* Change deterministic id to use something other than MD5 but allow
the old way for compatibility -- maybe rename the method to force
the developer to make a choice