RE: draft-ietf-ldapbis-filter-03.txt

["Steven Legg" <steven.legg@adacel.com.au>]

Another data point ...

Mark C Smith wrote:
> Hallvard B Furuseth wrote:
> > Why was section 6 "String Search Filter Definition" changed to
> > say that "all octets greater than 0x7f" must be escaped?

The string representation of LDAP search filters is used in LDAP URLs.
LDAP URLs are present in Referrals in components of type LDAPString.
LDAPString is required to contain UTF-8 encoded characters.
If octets in the range 0x80 to 0xff in arbitrary octet data in assertion
values are not escaped then they could potentially represent invalid
UTF-8 encodings. Escaping octets > 0x7f means that the filter string
is ASCII and therefore also valid UTF-8.

Regards,
Steven