Re: New version of TLS + IMAP/POP/ACAP draft

On Thu, 19 Nov 1998, John Gardiner Myers wrote:
> Chris Newman wrote:
> > I loosened up the syntax for the PLAIN SASL mechanism a bit to allow any
> > non-zero octet in the password.
> 
> I disagree with this change.  The password should be specified as being
> in UTF-8.

The actual text is:

---
     Clients are encouraged to support pure-binary passwords as they may
     be safe from dictionary attacks.  However, if the client offers a
     character-based interface for password entry it MUST use UTF-8
     encoding for the characters.

...

     password        = *NZ-OCTET        ; MUST accept up to 255 octets
---

So the password itself is a sequence of non-zero octets, but if the
password is character-based, then it's UTF-8.  Do you still object to the
change?

		- Chris