Nicolas Williams wrote:
In the case of "password" and "keyboard-interactive" userauth it's clear that the server processes the password so no stringprep profile is needed for the password in "password" userauth or for replies to "keyboard-interactive" userauth prompts.
Does what you're saying here imply that the client should really be required to send a character set string together with the password in those situations (such that the server can then make the appropriate translations), or have I misunderstood?
-- Jon Bright Silicon Circus Ltd. http://www.siliconcircus.com