removal of white spaces in password

Andrew Morgan morgan at orst.edu
Thu Jun 12 13:31:13 EDT 2014


On Thu, 12 Jun 2014, Christopher Bongaarts wrote:

> On 6/12/2014 12:09 PM, David Bantz wrote:
>> Why would an identity provider not allow spaces / pass phrases in “passwords?"
>
> I can think of a number of reasons why spaces might not be allowed in
> passwords, but I can't think of any cases where the process of setting a
> password would strip out the spaces prior to storing it, thus
> necessitating all validation mechanisms strip spaces prior to comparison...

You can lump Google into this category.  If you try to set a Google 
password with a leading or trailing space, Google will silently strip it 
off.  If you authenticate to Google with a password, it will silently 
strip off any leading or trailing spaces as well!

 	Andy


More information about the users mailing list