WebApp Sec: Re: Re: Securing PDF file on a Website

[andres.desa () paladion net]

Streaming a PDF file to the user`s browser will help in adding an authentication mechanism. 

A script file can be called to stream the PDF file. This script should authenticate the user based upon the credentials 
supplied. Also, this script can add cache-control headers, which will prevent the PDF file being stored in the local 
cache on the user's machine.

A whitepaper discussing these issues is available at
http://www.paladion.net/papers/Document_Security_in_Web_Applications.pdf


Andres Desa
Paladion Networks,
Mumbai - India

Application Security Magazine
http://palisade.paladion.net