Fwd: [precis] spaces at end of nickname
Peter Saint-Andre <[email protected]> Thu, 01 Nov 2012 09:02:13 -0600
| Newsgroups | gmane.ietf.simple |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Feedback appreciated. - -------- Original Message -------- Subject: [precis] spaces at end of nickname Date: Thu, 01 Nov 2012 08:41:55 -0600 From: Peter Saint-Andre <[email protected]> To: [email protected] <[email protected]> In the context of groupchat rooms, most applications show a room roster of the participants. One way to spoof nicknames is to simply add one or more space characters at the end, because the spaces don't show up in the interface (thus "stpeter", "stpeter " with one space at the end, and "stpeter " with two spaces at the end would all appear to be the same person). This seems like an obvious hole that we can plug by disallowing trailing (and perhaps leading) spaces in nicknames. I'll forward this message to the SIMPLE WG and XMPP WG for their feedback, and also raise this issue during the PRECIS WG session next week. Peter _______________________________________________ precis mailing list [email protected] https://www.ietf.org/mailman/listinfo/precis -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlCSjvUACgkQNL8k5A2w/vzbFQCeM1OGQDTI/bdS6oneRfF7+tH3 RToAn2Ou9gA+mVKbnjKTv8YTyhKlcDUy =b45p -----END PGP SIGNATURE-----