Comment 1 for bug 1476693

Hello Juergen,

thank you for taking the time to report this! I have looked into it and the root cause seem to be that we send PDF documents directly to CUPS where most other readers convert them to PostScript first. (This was a deliberate decision since PDF is supposed to be the default format for never CUPS filter pipelines.) But the CUPS API does not seem to give us any way to pass the password along so it can't open and decrypt the file for printing.

I think the proper solution is that we decrypt the file before printing, prompting for the password again since by giving it to the printing system, you have to acknowledge that it will process the data unencrypted. However, Poppler does not seem to have an API to store a decrypted version of a PDF document yet. (It will of course decrypt when converting to PostScript.) But it should be possible to add such an interface.

The alternative would be to convert to PostScript, either always or at least if the file is encrypted which I personally do not like too much, but which can be implemented using the status quo.

Best regards, Adam.