Re: Security hole

[Borka Jerman-Blazic <borka@xxxxxxxxx>]

> I think we're talking about two different issues here: character sets
> and fonts.  The character set and its interpretation are one thing, and
> their interpretation is a matter of standard.  The font issue is another,
> however, and unless a signature covered the font data completely, the
> defense that your signature covered something different from what you
> saw is without support.

 Sorry, but fonts are images of a characters in particular 
character set. Yhey are a part of so called character - glyph maping.
But, I see your point, if you download the font as we do
with Power Pont presentations then you can somehow guarntee 
safeness.
> 

> 
> As I think I made clear above, this really is about malicious code, in
> the fonts that are downloaded with the form to be signed.  It's
> probably a very good idea to specify the entire content of a form, as
> displayed, that you fill out and sign, just as when you sign a paper
> document "as displayed", since proof of material modification of the
> document after your signature can void it.
> 

The only problem I am seeing here is before you see what the
other party is offering (displaying) you must download the appropriate font 
in order to see what you are going to sign. If it is so simple then
this should be added in the standard.


Regards,


Borka