Re: Fwd: [precis] spaces at end of nickname

Ben Campbell <[email protected]> Thu, 1 Nov 2012 10:07:26 -0500
Newsgroups gmane.ietf.simple
Message-ID <[email protected]>
+1. Should we generalize this to leading and trailing white space?

On Nov 1, 2012, at 10:02 AM, Peter Saint-Andre <[email protected]> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Feedback appreciated.
> 
> 
> - -------- Original Message --------
> Subject: [precis] spaces at end of nickname
> Date: Thu, 01 Nov 2012 08:41:55 -0600
> From: Peter Saint-Andre <[email protected]>
> To: [email protected] <[email protected]>
> 
> In the context of groupchat rooms, most applications show a room
> roster of the participants. One way to spoof nicknames is to simply
> add one or more space characters at the end, because the spaces don't
> show up in the interface (thus "stpeter", "stpeter " with one space at
> the end, and "stpeter  " with two spaces at the end would all appear
> to be the same person). This seems like an obvious hole that we can
> plug by disallowing trailing (and perhaps leading) spaces in
> nicknames. I'll forward this message to the SIMPLE WG and XMPP WG for
> their feedback, and also raise this issue during the PRECIS WG session
> next week.
> 
> Peter
> 
> _______________________________________________
> precis mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/precis
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
> Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
> 
> iEYEARECAAYFAlCSjvUACgkQNL8k5A2w/vzbFQCeM1OGQDTI/bdS6oneRfF7+tH3
> RToAn2Ou9gA+mVKbnjKTv8YTyhKlcDUy
> =b45p
> -----END PGP SIGNATURE-----
> _______________________________________________
> Simple mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/simple
>