What about password-protected pdf files?

[DeltaEpsilon19498]

At https://dangerzone.rocks/about/, Micah Lee tells a particular story about the risk of malware in documents that are not sanitized by Dangerzone.

For example, if an attacker knows about a security bug in Microsoft Word, they can carefully craft a Word document that, when opened using a vulnerable version of Word, will hack your computer. All they have to do is trick you into opening it, perhaps by sending you a convincing enough phishing email.

This is exactly what Russian military intelligence did during the 2016 US election.

Nowadays, it looks like threat actors are increasingly relying on sending encrypted documents or encrypted zip files, then telling the victim the password to open the file. This helps avoid antimalware detection.

In dangerzone, if I want to sanitize an encrypted document, I do not see a way to hand dangerzone the encryption password so that it can open up the document and sanitize it. Is there a way to do this, or is this an easy way to defeat dangerzone as a security tool?

[almet]

Hi, and thanks for the comment. There is an issue about it, it's at #46. I'll add a comment there to bump it.

[DeltaEpsilon19498]

thanks!