For instance if verifying with
verapdf xxx.pdf --format html xxx.html
the result contains the full path of xxx.pdf.
I think, this unveils the environment which is not secure and it does not savely relate the 'certificate' xxx.html to the according document, because you can move that and can place another one at the same path.
Better would be to include the trailer id into the xxx.html, likewise for xxx.json.
I create pdf from latex.
That way even the compilation run is fixed.
Then it is perfectly reasonable not to give the full path, just the filename.
For instance if verifying with
the result contains the full path of
xxx.pdf.I think, this unveils the environment which is not secure and it does not savely relate the 'certificate'
xxx.htmlto the according document, because you can move that and can place another one at the same path.Better would be to include the trailer id into the
xxx.html, likewise forxxx.json.I create pdf from latex.
That way even the compilation run is fixed.
Then it is perfectly reasonable not to give the full path, just the filename.