Re: userPassword comment

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Kurt D. Zeilenga writes:
> that applications SHOULD prepare textual strings used as passwords
> before storing them in the directory to improve the likelihood
> that passwords work as expected.   To prepare a textual string,
> the application MUST transcode to Unicode, apply SASLprep, and
> transfer using UTF-8.

SHOULD prepare, but MUST transcode and so on?  Do you mean that
IF it prepares, it MUST do it by transcoding and so on?

Is 'transcode to Unicode, apply SASLprep, and transfer using UTF-8' the
definition of 'to prepare' the string, or can 'prepare' mean something
else?  If the former, how about:

  ...the application SHOULD prepare textual strings used as passwords
  by transcoding them to Unicode, applying SASLprep, and encoding as
  UTF-8.

Though I don't think the schema draft should talk about 'transfer'.
That's a protocol thing.  How about 'encode' as UTF-8?

Finally, where is SASLprep defined?

-- 
Hallvard