Hi Leonard (since you answer most of the questions anyway )
i have a question regarding the use of a stronger hash or encryption strength in a PDF/A document. In one of your previous posts you stated:
"For example, for true PDF/A-1 compatibility you should not use SHA256 since it didn't exist in PDF 1.4 (on which PDF/A-1 is based) even though it would be a perfectly valid PDF file."
Now i read another document of yours called 'ISO 19005-1 (PDF/A-1) Application Notes'. There on page 30 'Digital Signatures' you write:
"Revocation: As with Timestamping, since the presence of certificate revocation information does not effect the visual display of the PDF, it is permitted by PDF/A-1, even though it is a PDF 1.5 feature."
Now one could say that using a stronger hash or encryption algorithm falls into the same category:
So for instance even if RSA 2048 and SHA256 were not supported in 1.4 (but in 1.5) - shouldn't they be permitted in PDF/A also?
Isn't that, although not explicitly mentioned, well within the stated goals of PDF/A-1?
Thanks
ToM