On 2024-12-03 15:45, Marc Haber wrote:
On Tue, Dec 03, 2024 at 10:18:46PM +0100, Gioele Barabucci wrote:Normalization is always lossy, at least in principle.Applications that employ normalization accept that tradeoff in order to gain something valuable: in this case the ability to have a Ohm sign codepoint as part of your username is traded for the ability to compare usernames across different OSes and applications.I don't know what's exactly in the standard, but my gut feeling says that I would probably store _exactly_ what was received, but normalize both sides before duplicate checking, sorting, comparing.
That approach has an advantage for backwards compatibility: it works with any existing usernames in the password file, regardless of how they were encoded.
-- Richard
OpenPGP_signature.asc
Description: OpenPGP digital signature
