On Nov 1, 2012, at 8:41 AM, Peter Saint-Andre <[email protected]>
 wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> In the context of groupchat rooms, most applications show a room
> roster of the participants. One way to spoof nicknames is to simply
> add one or more space characters at the end, because the spaces don't
> show up in the interface (thus "stpeter", "stpeter " with one space at
> the end, and "stpeter  " with two spaces at the end would all appear
> to be the same person). This seems like an obvious hole that we can
> plug by disallowing trailing (and perhaps leading) spaces in
> nicknames. I'll forward this message to the SIMPLE WG and XMPP WG for
> their feedback, and also raise this issue during the PRECIS WG session
> next week.
> 

+1 to disallowing leading and trailing whitespace.


- m&m

Matt Miller < [email protected] >
Cisco Systems, Inc.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
precis mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/precis

Reply via email to