[NNTP] Spaces in usernames and passwords

Clive D.W. Feather clive at demon.net
Tue Sep 7 07:00:50 PDT 2004


Ken Murchison said:
> I'm fine with this as well.  I'll also propose this as a possible 
> simpler and less-wordy alternative:
> 
> 
> username = 1*(user-pass-char)
> password = 1*(user-pass-char)
> user-pass-char = P-CHAR

The parentheses aren't needed.

> Note: A server implementation MAY parse AUTHINFO USER and AUTHINFO PASS 
> specially as to allow white space to be used within the username or 
> password.  Such implementations typically treat everything between the 
> first whitespace character following "USER"/"PASS" and EOL as the 
> username/password.

Not EOL, because that includes trailing white space. Say CRLF instead.

> In this case, "user-pass-char" is extended as such:
> 
> user-pass-char =/ SP / TAB

Better, I think, is:

    Such implementations accept the additional syntax:

        user-pass-char =/ SP / TAB

    (note that this makes the overall grammar ambiguous and also makes
    these commands incompatible with "x-command").

-- 
Clive D.W. Feather  | Work:  <clive at demon.net>   | Tel:    +44 20 8495 6138
Internet Expert     | Home:  <clive at davros.org>  | Fax:    +44 870 051 9937
Demon Internet      | WWW: http://www.davros.org | Mobile: +44 7973 377646
Thus plc            |                            |



More information about the ietf-nntp mailing list