IETF Logo Mail Archive

Re: spaces in passwords

Steve Dorner <sdorner@qualcomm.com> Fri, 27 May 1994 18:35 UTC

Received: from ietf.nri.reston.va.us by IETF.CNRI.Reston.VA.US id aa06624; 27 May 94 14:35 EDT
Received: from CNRI.RESTON.VA.US by IETF.CNRI.Reston.VA.US id aa06620; 27 May 94 14:35 EDT
Received: from PO5.ANDREW.CMU.EDU by CNRI.Reston.VA.US id aa12949; 27 May 94 14:35 EDT
Received: (from postman@localhost) by po5.andrew.cmu.edu (8.6.7/8.6.6) id OAA22247; Fri, 27 May 1994 14:23:54 -0400
Received: via switchmail for ietf-pop3+@andrew.cmu.edu; Fri, 27 May 1994 14:23:52 -0400 (EDT)
Received: from po3.andrew.cmu.edu via qmail ID </afs/andrew.cmu.edu/service/mailqs/q000/QF.QhtXdYy00UdbJDc05c>; Fri, 27 May 1994 14:22:29 -0400 (EDT)
Received: from ux1.cso.uiuc.edu (ux1.cso.uiuc.edu [128.174.5.59]) by po3.andrew.cmu.edu (8.6.7/8.6.6) with SMTP id OAA20372 for <ietf-pop3+@andrew.cmu.edu>; Fri, 27 May 1994 14:22:20 -0400
Received: from dorner.slip.uiuc.edu by ux1.cso.uiuc.edu with SMTP id AA13410 (5.67b8/IDA-1.5 for <ietf-pop3+@andrew.cmu.edu>); Fri, 27 May 1994 13:22:03 -0500
Received: from [192.17.5.3] by dorner.slip.uiuc.edu with SMTP id AA29037 (5.67b/IDA-1.5 for <ietf-pop3+@andrew.cmu.edu>); Fri, 27 May 1994 13:22:15 -0500
X-Sender: sdorner@192.17.5.1
Message-Id: <aa0be4fe0b0210156d94@[192.17.5.3]>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Fri, 27 May 1994 13:21:57 -0500
To: POP3 IETF Mailing List <ietf-pop3+@andrew.cmu.edu>
Sender: ietf-archive-request@IETF.CNRI.Reston.VA.US
From: Steve Dorner <sdorner@qualcomm.com>
Subject: Re: spaces in passwords

At 11:23 AM 5/27/94, John Gardiner Myers wrote:
>sdorner@qualcomm.com (Steve Dorner) writes:
>> What about spaces in passwords?  They don't work.
>
>They do in my server implementation.

I presume you mean you interpret "PASS foo bar" to mean a password of "foo
bar".  This isn't the original intent of the RFC (I've asked), but it's
certainly reasonable.

However, what is your interpretation of:

        PASS  foobar<CRLF>

Is the password " foobar"?  Or is the password "foobar"?

Seems to me that a reasonable case could be made for either.  This would be
a problem; even for your server.

--
Steve Dorner, Qualcomm Incorporated
 "There's nothing wrong with you that can't be cured
  with a little Prozac and a polo mallet." - Woody Allen

v2.23.0 | Report a Bug | By Email