Hi Dave,
Dave Thaler wrote:
Andrew Sullivan asked:
I'd be especially interested in whether people think that table is worth
anything, before I complete it. I'm of two minds.
I'd say yes.
To its credit, it made me go look at one of the reviews (Alexey's review of
RFC4314 at http://www.ietf.org/mail-archive/web/precis/current/msg00086.html)
for more info. I'm not that familiar with IMAP or SASLprep so I am confused
about
one thing and hope someone can explain it in simple terms for me :)
The review says:
Most likely case sensitive. Exact requirements on
case-sensitivity/case-preservation
depend on a specific implementation, e.g. an implementation might treat all user
identifiers as case insensitive (or case insensitive for US-ASCII subset only).
But RFC 4013 says:
This profile is not intended for use in
preparing identity strings that are not simple user names (e.g.,
email addresses, domain names, distinguished names), or where
identity or password strings that are not character data, or require
different handling (e.g., case folding).
I don't think there is necessarily a contradiction. Case folding can be
applied as an extra step after RFC 4013 processing.
The table Andrew added has "a,d" (but not "i"). That would be correct if all
implementations agreed on the case sensitivity rules. And RFC 4013 says it's
not appropriate for things that aren't case sensitive.
So I'm confused about the part of the review saying:
"Exact requirements on case-sensitivity/case-preservation
depend on a specific implementation, e.g. an implementation might treat all user
identifiers as case insensitive (or case insensitive for US-ASCII subset only)."
Can someone elaborate on this?
Ok, let me try to elaborate on my review and why I wrote what I wrote. I
was talking specifically about IMAP/POP/SMTP usernames (passwords are
another story). Many email servers support all of the three protocols
and use the same identity format in all three. For a given email address
the corresponding user identity is either the left hand side of the
email address and/or the whole email address. (This isn't documented
anywhere, but it is one of the things that all email implementors need
to know.) The domain part (if included) is case-insensitive. SMTP (RFC
5321) says that the left hand side is case sensitive. In practice this
restriction turned out to be quite problematic in real deployments
(because humans just don't pay attention to case sometimes) and most of
the systems I know of treat left hand sides as case sensitive. However
until and unless an update to RFC 5321 declares that all left hand sides
of email addresses are case insensitive, we can't say that left hand
sides are always case insensitive, as some systems might rely on case
sensitivity of left hand sides.
Does this help?
Best Regards,
Alexey
--
Internet Messaging Team Lead, <http://www.isode.com>
JID: same as my email address
twitter: aamelnikov
_______________________________________________
precis mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/precis