PDF Document Security Tricks : Keeping Website Data Secure In 2020
PDF is a commonly used document format for both desktop reading and online reading. However keeping the data within PDF secure is commonly misunderstood because many think that simply password protecting normal PDF will prevent anyone from accessing information that you may want to keep private and restrict to employees or otherwise privileged users. Unfortunately normal PDF cannot be secure and passwords can easily be extracted and shared.
When securing PDF documents for desktop reading it is much more secure when using DRM to limit access, especially DRM based on unique computer identity rather than a token file that can shared. Of course for any PDF security software to be secure and safe from exploits, the PDF file needs to be encrypted and a proprietary PDF reader used to validate the user's computer identity and allow access only when the author's requirements are met. Consequently generic PDF readers are not recommended and as a precaution, should not be able to decrypt and display any securely protected PDF. The same applies to secured PDF for online reading from a web page. The PDF file needs to be encrypted and its unlock password and keys protected. Consequently any online PDF viewer based on JavaScript alone will never be able to keep its unlock key secure, and again, the only recommended reader should be a proprietary web browser or browser plugin that will provide the only means of decrypting the PDF file and displaying its contents. To ensure that the PDF file itself cannot be downloaded and displayed on another web site, using encryption based on the domain name of the website can ensure that the PDF file can only be read from the intended website. For online reading, employing DRM similar to that used for desktop reading can cause conflicts and troubleshooting access failures can be a tedious and confusing chore. So in such cases, DRM is best left out of the PDF file and instead applied by access controls managed by the website itself. For example with CMS like WordPress and Moodle one has the choice of many different types of membership plugins, some integrated with pay to see and periodic subscription renewal, and some specifically designed for online tuition and course enrollment. Regardless of whether you use a PDF security software to encrypt and manage access rights to your PDF, or use a site protection software to protect normal PDF when embedded on web pages, care is needed when selecting the PDF viewer and the methods of display on the page, because while the PDF may be securely protected from copy while on display, the link to the PDF file's location, where it is stored online, can still be easily obtained and the file downloaded directly, thus evading any copy protection that may be applied to the web page. To prevent direct downloads when embedding normal PDF on web pages, it most recommended to "stream" the file so that the file's data is sent to the browser without providing the download link to visitors. Also, the PDF viewer that is displayed on the web page needs to be a custom viewer so that it is not accessible by Adobe Reader's plugin which provides permanent options for save, print and copy that cannot be removed or disabled. There are some interesting WordPress plugins that will take the PDF file and dissemble its contents for restructure and display on the web page as HTML to avoid using Adobe Reader resources. But be careful to disable those copy options in the viewer's toolbar. The security of any PDF protection or site protection software will be greatly enhanced by limiting visitor access to the ArtisBrowser web browser, because unlike all popular web browsers, the ArtisBrowser is specially designed to protect website content. While using the ArtisBrowser, view of source, copy-n-paste, save and print can be controlled by the site owner and data cannot be extracted from browser cache or memory.














