Subj : Re: Packet password case insensitive or not?
To   : Oli
From : Wilfred van Velzen
Date : Wed Apr 22 2020 10:33:14

Hi Oli,

On 2020-04-22 10:14:54, you wrote to me:

 Ol> I remember that we always used uppercase packet passwords. I assumed
 Ol> that passwords are case insensitive, but I think I never tried to use
 Ol> lowercase in the config.

There seems to be different kind of implementations in different tossers...

 WV>> Packet and areafix passwords are case insensitive in FMail. But
 WV>> according to Nick there are tossers that are not...

 Ol> Crashmail and Squish use stricmp() for the packet passwords -> case
 Ol> insensitive.

FMail currently is too.

 Ol> How does stricmp compare strings with high ascii characters?

On linux that depends on the locale that's set on the computer. So you can get 
different results on different computers.

So another good reason to use case sensitive passwords.

 WV>> And that's what I'm trying to find out, if there could be a problem
 WV>> if I change FMails behaviour. I'm not seeing it, but I can't think of
 WV>> everything. ;)

 Ol> I would say in theory there should be less problems, if FMail were able to
 Ol> send mixed case passwords.

It becomes more flexible what you can use. But maybe needs a bit more tweaking 
to get it right when talking to a case insensitive tosser.

 Ol> Maybe we should use hex notation for the passwords, so all 255
 Ol> characters can be used for better security ;).

FTS-0001 Doesn't rule that out. (It just says 8 bytes for the packet password). 
;)

Bye, Wilfred.

--- FMail-lnx64 2.1.0.18-B20170815
 * Origin: FMail development HQ (2:280/464)

.