Re: spaces in passwords

Steve Dorner <sdorner@qualcomm.com> Fri, 27 May 1994 21:11 UTC

Received: from ietf.nri.reston.va.us by IETF.CNRI.Reston.VA.US id aa08619; 27 May 94 17:11 EDT
Received: from CNRI.RESTON.VA.US by IETF.CNRI.Reston.VA.US id aa08615; 27 May 94 17:11 EDT
Received: from PO6.ANDREW.CMU.EDU by CNRI.Reston.VA.US id aa24481; 27 May 94 17:11 EDT
Received: (from postman@localhost) by po6.andrew.cmu.edu (8.6.7/8.6.6) id RAA29344; Fri, 27 May 1994 17:01:52 -0400
Received: via switchmail for ietf-pop3+@andrew.cmu.edu; Fri, 27 May 1994 17:01:51 -0400 (EDT)
Received: from po3.andrew.cmu.edu via qmail ID </afs/andrew.cmu.edu/service/mailqs/q004/QF.shtZyCC00UdbBl0E5M>; Fri, 27 May 1994 17:01:02 -0400 (EDT)
Received: from ux1.cso.uiuc.edu (ux1.cso.uiuc.edu [128.174.5.59]) by po3.andrew.cmu.edu (8.6.7/8.6.6) with SMTP id RAA28924 for <ietf-pop3+@andrew.cmu.edu>; Fri, 27 May 1994 17:00:58 -0400
Received: from dorner.slip.uiuc.edu by ux1.cso.uiuc.edu with SMTP id AA29652 (5.67b8/IDA-1.5 for <ietf-pop3+@andrew.cmu.edu>); Fri, 27 May 1994 16:00:41 -0500
Received: from [192.17.5.3] by dorner.slip.uiuc.edu with SMTP id AA29340 (5.67b/IDA-1.5 for <ietf-pop3+@andrew.cmu.edu>); Fri, 27 May 1994 16:00:46 -0500
X-Sender: sdorner@192.17.5.1
Message-Id: <aa0c0c8408021015b6bb@[192.17.5.3]>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Fri, 27 May 1994 16:00:34 -0500
To: POP3 IETF Mailing List <ietf-pop3+@andrew.cmu.edu>
Sender: ietf-archive-request@IETF.CNRI.Reston.VA.US
From: Steve Dorner <sdorner@qualcomm.com>
Subject: Re: spaces in passwords

Ok, I grabbed the new draft.  Here's what it says:

   Commands in the POP3 consist of a keyword possibly followed by an
   argument.  All commands are terminated by a CRLF pair.  Keywords and
   arguments consist of printable ASCII characters separated by whitespace
   (one or more consecutive SPACE and/or TAB characters).

So,

        pass foo bar

Has two arguments, "foo" and "bar".  If you treat this as having one
argument "foo bar" you are doing something sensible but in violation of
letter of the spec.

As for whether this is worth fixing, I dunno.  I get one piece of mail a
month, give or take, from people who can't understand why their
space-infested password doesn't work.  What level of frustration this
indicates in the world at large, who knows?

If anybody else cares, say so.  If not, I'll drop it.

--
Steve Dorner, Qualcomm Incorporated
 "There's nothing wrong with you that can't be cured
  with a little Prozac and a polo mallet." - Woody Allen