News for hackers. Stuff that matters.

A comment on Let them paste passwords. Parent comment

Re:Let them paste passwords by simcop2387 on Thursday May 18, 2017 @12:17PM (#14368491)
Fully qualified domains actually end in a . If you're allowing sally@google then you must also allow sally@google. To be valid
[ Parent | on HN ]
Re:Let them paste passwords by eridius on Thursday May 18, 2017 @01:38PM (#14369289)
No you don't. Email addresses explicitly require any periods in the domain to have at least one (non-period) character after the period. From RFC 5322, the relevant grammar production for the domain looks like

  dot-atom-text   =   1*atext *("." 1*atext)
(where atext is letters, digits, or a set of specific punctuation characters that doesn't include periods).
[ Parent | on HN ]
Re:Let them paste passwords by simcop2387 on Saturday May 20, 2017 @03:16AM (#14381374)
Ah, I wasn't aware that email addresses defined that differently. it looks like it's also the same way as part of obs-domain as defined by the addr-spec part of that. RFC 822 also seems to say the same thing, it's been way too long since i've tried to read those RFCs.
[ Parent | on HN ]