ietf-nntp Question about AUTHINFO

[Russ Allbery]

Joao Prado Maia <jpm at papercut.org> writes:

> I have a question regarding the AUTHINFO command in NNTP. By reading the
> RFC 977 I'm not sure if I should be supporting usernames with spaces in
> them or not. Let's say:

> client> LIST
> server> 480 Authentication required
> client> AUTHINFO Joao Prado

I assume you mean AUTHINFO USER Joao Prado.

> Should 'Joao Prado' be kept as the username for this session ? I guess
> it makes sense to do this, but I wasn't sure if other news servers would
> handle this situation in the same way.

It's unclear.  INN currently uses a username of "Joao", which is really
the wrong thing to do (it should either be an error or the server should
use the full thing as the username, I think).

This problem is more common with passwords.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>