Right now the password protection is implemented according to the ooxml specification. It works correctly but it is not intended to prevent the file from being opened without the password prompt. Password protected files should not be saved as zip containers, instead they should be saved as MS-CFB containers according to the following specification: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cfb/53989ce4-7b05-4f8d-829b-d08d6148375b . MS-CFB should be implemented to allow full password protection
gunnsth
commented
4 years ago
Description
Right now the password protection is implemented according to the ooxml specification. It works correctly but it is not intended to prevent the file from being opened without the password prompt. Password protected files should not be saved as zip containers, instead they should be saved as MS-CFB containers according to the following specification: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cfb/53989ce4-7b05-4f8d-829b-d08d6148375b . MS-CFB should be implemented to allow full password protection