[Twisted-Python] PLAINAuthenticator in twisted.mail.imap4
kevin.horn at gmail.com
Wed Jul 29 01:54:20 EDT 2009
I was digging through the Twisted IMAP code tonight and I noticed something
PLAINAuthenticator.challengeResponse() uses the following statement to send
auth credentials to the server
return '%s\0%s\0' % (self.user, secret)
which would give auth credentials of the form:
(where <NUL> is the NUL character)
However, both RFC2595 and RFC4616 (both define the PLAIN SASL mechanism),
say that credentials should be passed this way:
(where <NUL> is the NUL character and [authzid] is optional)
Now even if one was to leave the authzid out of the equation, you would end
up with something like this:
and the version Twisted's IMAP code uses appears to be invalid.
Am I crazy?
Am I missing something?
Is it just way too late and I should put the RFCs down and back away slowly?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Twisted-Python