Subject: CRAM-MD5: definition of user

From: Lyndon Nerenberg <[email-masked]>
Date: Thu, 22 Nov 2001 10:16:52 -0700

In the grammar I defined <user> as a sequence of OCTETs. At issue is
the inclusion of NUL in the set of octets that make up the <user>.
In London we discussed including NUL, but there was no consensus
about whether this was a good thing or a bad thing.

There are two questions that need to be answered before we can
decide if using OCTET is appropriate:

1) Are there implementations that actively use NUL in
   CRAM-MD5 user names?

2) Are there implementations that would fail catestrophically
   if presented with a NUL in a user name?

--lyndon