[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Stringprep Considered Harmful
At 12:34 AM 11/15/2004, Rici Lake wrote:
>The ldapbis strprep draft says in its abstract that the motivation
>for the specification is interoperability;
Actually, the Abstract says:
This led to a number of usability and interoperability problems.
which implies LDAPprep was intended to resolve these problems.
>there is no mention of security as a primary motivator.
Yes. But the lack of mention of security in the Abstract
does not imply that LDAPprep does not or should not attempt
to resolve applicable security considerations.
Kurt