-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In the context of groupchat rooms, most applications show a room
roster of the participants. One way to spoof nicknames is to simply
add one or more space characters at the end, because the spaces don't
show up in the interface (thus "stpeter", "stpeter " with one space at
the end, and "stpeter  " with two spaces at the end would all appear
to be the same person). This seems like an obvious hole that we can
plug by disallowing trailing (and perhaps leading) spaces in
nicknames. I'll forward this message to the SIMPLE WG and XMPP WG for
their feedback, and also raise this issue during the PRECIS WG session
next week.

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlCSijMACgkQNL8k5A2w/vyYOgCgsNGJjqqFTq8hZtTKp80GfRlN
ZsAAoOpkUht0uNEA1iiBgtAz44/Pvwba
=2e1O
-----END PGP SIGNATURE-----
_______________________________________________
precis mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/precis

Reply via email to