OK. The failed otk had a 3D at the end, so maybe that was one of those quoting characters that ended up on the forwarded URL when it shouldn't have. But it seems odd the perimeter software wouldn't know how to clean up after itself.
________________________________________ From: Henrik Pauli <[email protected]> Sent: Tuesday, December 10, 2019 4:26 AM To: Boylan, Ross Cc: [email protected] Subject: Re: [Eric] Unable to register with issue tracker I'm not associated with Eric or Riverbank Computing or any of these places, I'm just a random subscriber to the mailing list. On 09/12/2019 18:43, Boylan, Ross wrote: > Can you tell me what the original URL was? > > I expect that what's supposed to happen is that the original URL gets escaped > as necessary (aka "mangled"), tacked on at the end of a redirect to our > security service, proofpoint.com, and that when they get the URL they reverse > the translation, decide if it's OK, and (usually) send it on. The odd thing > here was that it was not blocked, but it was messed up. > > Is the error message I got from your site what you would expect if the URL > were used twice? Maybe if proofpoint.com did a "pre-check" that would > explain why it failed. > Ross > > ________________________________________ > From: Henrik Pauli <[email protected]> > Sent: Monday, December 9, 2019 3:46 AM > To: Boylan, Ross > Cc: [email protected] > Subject: Re: [Eric] Unable to register with issue tracker > > Sounds like an issue with your email system than anything else. Best if you > take it to your sysadmins. > > 3D is the ASCII code of the equals sign, so it could be that something > mangled URL encoding or Quoted-Printable encoding (both use an escape > character -- % and =, respectively -- and the byte code of the character > escaped), and this is why whatever you click on doesn't seem to lead > anywhere. If there are URLs that are use-once, them checking on them and > opening them might be even worse. > > On Sat, 7 Dec 2019 at 08:24, Boylan, Ross > <[email protected]<mailto:[email protected]>> wrote: > I tried to create an account with the eric issue tracker; it emailed me a > message instructing me to click on a link to complete the process. When I > did so, I reached the site but a banner near the top said 'No such otks > "wfk4....."' where ... represents a long string of characters. > > This mailing list also wanted me to click on a URL to confirm, but offered an > email reply as an alternative, which I think worked. > > Our local security software rewrites all URLs in email to route them through > some security system, but I believe they end up resolving to the original > URL, which is part of the rewritten URL. The rewritten URL appears to have > 3D immediately before the code indicated in the message, and it looks as if > 3X (where X is various letters) might be some kind of separator. > > At any rate, if there's some way to register that would be nice. > > Ross > _______________________________________________ > Eric mailing list > [email protected]<mailto:[email protected]> > https://urldefense.proofpoint.com/v2/url?u=https-3A__www.riverbankcomputing.com_mailman_listinfo_eric&d=DwICaQ&c=iORugZls2LlYyCAZRB3XLg&r=nh70E5-mX2XsDe5lrDDMt_ZRqqGMcdTmTrRLvNmttYA&m=mbQvFc_4e6Kd76HdbVlWjIpPIwZ5pCiLvtGGhXIFIS4&s=nyEPMM0fLzGLnGuSDlkhHmhjhQ5dqTkVPWAbBXcHRJw&e= > > <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.riverbankcomputing.com_mailman_listinfo_eric&d=DwMFaQ&c=iORugZls2LlYyCAZRB3XLg&r=nh70E5-mX2XsDe5lrDDMt_ZRqqGMcdTmTrRLvNmttYA&m=6TIzJbkj3rqKgkzSfL3JDF9zawKJTr_D8dbzgUPVmJE&s=gpTbgwYChb1gVbQxwUL36x6F6XixhuK3HNc2lVq7a_0&e=> _______________________________________________ Eric mailing list [email protected] https://www.riverbankcomputing.com/mailman/listinfo/eric
