Update notes on API changes for weak crypto

Jay Berkenbilt
1 parent f9fc57d2
Showing 1 changed file with 6 additions and 1 deletions
TODO
@@ -193,7 +193,12 @@ Comments appear in the code prefixed by &quot;ABI&quot;
     creation of files with insecure crypto. Maybe
     QPDFWriter::allowWeakCrypto. Call this when --allow-weak-crypto is
     passed and probably also when copying encryption by default from
-    an input file.
+    an input file. There should be some API change so that, when
+    people recompile with qpdf 11, their code won't suddenly stop
+    working. Getting this right will take careful consideration of the
+    developer and user experience. We don't want to create a situation
+    where exactly the same code fails to work in 11 but worked on 10.
+    See #576 for latest notes.
   * Change deterministic id to use something other than MD5 but allow
     the old way for compatibility -- maybe rename the method to force
     the developer to make a choice