Subj : Re: Packet password case insensitive or not?
To   : Oli
From : Wilfred van Velzen
Date : Wed Apr 22 2020 10:33 am

Hi Oli,

On 2020-04-22 10:14:54, you wrote to me:

Ol> I remember that we always used uppercase packet passwords. I assumed
Ol> that passwords are case insensitive, but I think I never tried to use
Ol> lowercase in the config.

There seems to be different kind of implementations in different tossers...

WV>> Packet and areafix passwords are case insensitive in FMail. But
WV>> according to Nick there are tossers that are not...

Ol> Crashmail and Squish use stricmp() for the packet passwords -> case
Ol> insensitive.

FMail currently is too.

Ol> How does stricmp compare strings with high ascii characters?

On linux that depends on the locale that's set on the computer. So you can get
different results on different computers.

So another good reason to use case sensitive passwords.

WV>> And that's what I'm trying to find out, if there could be a problem
WV>> if I change FMails behaviour. I'm not seeing it, but I can't think of
WV>> everything. ;)

Ol> I would say in theory there should be less problems, if FMail were able to
Ol> send mixed case passwords.

It becomes more flexible what you can use. But maybe needs a bit more tweaking
to get it right when talking to a case insensitive tosser.

Ol> Maybe we should use hex notation for the passwords, so all 255
Ol> characters can be used for better security ;).

FTS-0001 Doesn't rule that out. (It just says 8 bytes for the packet password).
;)

Bye, Wilfred.

--- FMail-lnx64 2.1.0.18-B20170815
* Origin: FMail development HQ (2:280/464)

You are viewing proxied material from cvs.synchro.net. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.