New Participant

Question

Integrity issues with Digitally signed pdf in Mac preview

Forum|Forum|2 years ago
January 31, 2023
3 replies
5028 views

hi i have macpro with intel chip and mac os Ventura 13.2. i use acrobat reader 2022.003.20314.

i use the DSC from eMudhara.

i digitally sign the pdf in acrobat and save it.

when i open in acrobat the digital signature is fine, it say the digital signature is valid.

when i open the same pdf in macPreview, i can simply delete the Digital signature.

any onne encounter this issue?

This topic has been closed for replies.

Joel Geraci

Community Expert

It's worse than you think. Even if you certify the PDF, then add the signature, Preview removes both... though even that isn't quite accurate. The signatures are actually still there but Preview ignores the permissions set to disabler editing and does an append save so that it appears the the document is no longer signed. However, when you attempt to edit the file in Acrobat, it still respects the permissions. See the image below. Notice how the signature panel is blank but the file is still considered to be signed. This is a serious flaw in Apple Preview.

The good news is, it's easy to detect a PDF that has been corrupted by Preview (which in my opinion is every PDF file modified by Preview) by looking at the document properties.

This information doesn't solve the problem but it is a way to detect that a problem has occurred. Unfortunately, we don 't control Apple. We can only alert them to the issue.

MikelKlink

Participating Frequently

This information doesn't solve the problem but it is a way to detect that a problem has occurred. Unfortunately, we don 't control Apple. We can only alert them to the issue.

One shouldn't focus too much on Apple / Preview here. Yes, they indeed are a prominent bad example, but as PDF is an open format, anyone can create an application to manipulate PDFs quite arbitrarily. Heck, if you know what you're doing, a text editor suffices...

Thus, if you don't see that Quartz producer line, it doesn't mean your copy of the PDF is not corrupted or manipulated.

try67

Community Expert

Mac Preview is a terrible application that corrupts PDF files simply by opening them, so this is not surprising.

After you "delete" the signature in it, though, what do you see if you save the file and then open it in Acrobat? Does it signature appear at all? Or just as invalidated?

P

Prasad28179984q72rAuthor

New Participant

hi try67

after the signature is deleted in preview, and saved and then opened in acrobat, the content can be seen, but the signature has vanished.

T

Test Screen Name

Brainiac

You are correct. This is inevitable. Signatures can be removed, even if Adobe software blocks it. The recipients must be properly trained and motivated to check signatures (not look on the pages) otherwise there was no point in signing at all.

MikelKlink

Participating Frequently

What exactly do you consider an issue here?

Digital PDF signatures are designed to allow a recipient of the PDF to check whether it is in a state you signed (with a possible small set of allowed changes you can select upon signing). If someone removes the signature, it isn't there anymore, so a later recipient sees (by the absense of your signature) that the document they received is not in the state you signed.

P

Prasad28179984q72rAuthor

New Participant

Hi MikelKlink

what you shared is one prespective.

the ability to remove the digital signature means the integrity of the PDF is invalidated and the end receipent may not even be aware of this situation. the man in the middle could affix another Digital signature, which invalidates the objective of using DS in the first place. this is my conncern/issue.

Joel Geraci

Community Expert

The man in the middle wouldn't be able to apply your digital signature so be sure to train the recipients to do their due diligence when acting on files that have been signed.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded