[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Stringprep Considered Harmful

At 12:34 AM 11/15/2004, Rici Lake wrote:
>The ldapbis strprep draft says in its abstract that the motivation
>for the specification is interoperability;

Actually, the Abstract says:
  This led to a number of usability and interoperability problems.

which implies LDAPprep was intended to resolve these problems.

>there is no mention of security as a primary motivator.

Yes.  But the lack of mention of security in the Abstract
does not imply that LDAPprep does not or should not attempt
to resolve applicable security considerations.

Kurt