removal of white spaces in password
Andrew Morgan
morgan at orst.edu
Thu Jun 12 13:31:13 EDT 2014
On Thu, 12 Jun 2014, Christopher Bongaarts wrote:
> On 6/12/2014 12:09 PM, David Bantz wrote:
>> Why would an identity provider not allow spaces / pass phrases in “passwords?"
>
> I can think of a number of reasons why spaces might not be allowed in
> passwords, but I can't think of any cases where the process of setting a
> password would strip out the spaces prior to storing it, thus
> necessitating all validation mechanisms strip spaces prior to comparison...
You can lump Google into this category. If you try to set a Google
password with a leading or trailing space, Google will silently strip it
off. If you authenticate to Google with a password, it will silently
strip off any leading or trailing spaces as well!
Andy
More information about the users
mailing list