https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8272
--- Comment #4 from Joe Wein <joew...@surbl.org> --- In our code we strip out the Basic Authentication string ending in '@' before we convert the UTF-8 to ASCII, so that may explain the different behaviour. Technically, Basic Authentication is deprecated in non-FTP URIs and it's definitely not needed when checking host names against URIBLs, so the sooner it can be stripped out of the URI in the processing, the better. -- You are receiving this mail because: You are the assignee for the bug.