What comes next? Chinese symbols?!
Jeez ascii is more than you need. And how can you recommend using special
chars for passwords?! We don’t talk about !$%& and such we do talk about
äöüß.
I wouldn’t fix this if I would be responsible for the source. Its not
necessary. Just tell them they have to use ascii. Tell them casesensitve
alphanumeric passwords with at least 8 chars and their password is safe.
(aslong you log failed logon attempts and readin logs every day as a good
admin would)

Yes, im also against special chars in domains... that battle was lost. But
there is no need for special chars in passwords.

My 2 cents

Simon

-----Ursprüngliche Nachricht-----
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag
von Daniel Urstöger
Gesendet: Freitag, 25. Januar 2008 13:49
An: DBMail mailinglist
Betreff: Re: [Dbmail] Umlaut in password not working?

Hello,

well, I just tried it and confirm this happens with v.2.2.8
(set everything to UTF8), for POP and IMAP login.

on POP this happens:

+OK DBMAIL pop3 server ready to rock
user XXX
+OK Password required for XXX
pass äqwert1
-ERR your command does not compute
quit
+OK see ya later

on IMAP:

* OK dbmail imap (protocol version 4r1) server 2.2 ready to run
? login XXX äqwert1
? NO login rejected

so well, it would be nice if that could be fixed.

Kind regards,
Daniel

Robert Claeson schrieb:
> 
> On 25 Jan 2008, at 13:08, Michael Monnerie wrote:
> 
>> On Freitag, 25. Januar 2008 Simon Lange wrote:
>>> Well a-z and 0-9 should be all he needs.
>>
>> We're hosting companies that we cannot control, nor would they want to
>> accept that.
>>
>>> "löl" is not a secure password anyway.
>>
>> More secure than "jfhguieh" at least, because special chars are less
>> used in dictionary attacks. We always recommend using special chars for
>> passwords - so I'd like to have a fix.
>>
>>> Just tell him that special chars (which are öäüß) are not allowed in
>>> a password as they are not allowed in the localpart.
>>
>> That's an organisatoric solution, is there no technical fix?
> 
> I would also like to see a fix. We routinely recommend customers to use 
> characters outside the ASCII range for passwords as they have shown to 
> be much more secure than the usual ones.
> 
> _______________________________________________
> DBmail mailing list
> [email protected]
> https://mailman.fastxs.nl/mailman/listinfo/dbmail
_______________________________________________
DBmail mailing list
[email protected]
https://mailman.fastxs.nl/mailman/listinfo/dbmail

_______________________________________________
DBmail mailing list
[email protected]
https://mailman.fastxs.nl/mailman/listinfo/dbmail

Reply via email to