Quantcast
Viewing latest article 3
Browse Latest Browse All 40

Preventing PDF document from having a digital signature added with long term signature validation?

I'm running into a new issue with PDF file sizes. It seems that Acrobat X and above now have by default enabled a preference called "Include Signature’s Revocation Status When Signing". Essentially what this feature does is enable the verification of a signature that in the future may be revoked or expire, but prove at the time of the signing of the document that the signature was in fact valid by adding the certificate revocation list (.CRL file) of the certificate authorizing/verifying server.

So when someone has this preference enabled and signs the document, this adds the CRL list from this certificate server. At my company this list is approximately 2MB and the file size then increases from approximately .3MB to 3.1MB or so (with additional adobe bloat). With thousands of documents, you could see how this might be somewhat costly with space, bandwidth, and time as our main intranet site is located in another country.

Is there any way to create a PDF so that when someone signs a document with their digital signature, and that preference is enabled in their Acrobat, that it won't add the CRL list? With my particular document, verifying the signature long term is not at all needed but we want to sign it to prevent changes and to for very short term validation.

--

Additional information:The preference is found under the edit menu, click "preferences" then, Security > Advanced Preferences > Creation tab. What this preference does is explained here on Adobe's website, with full instructions on enabling and disabling.


Viewing latest article 3
Browse Latest Browse All 40

Trending Articles