[19838] in Kerberos_V5_Development
Re: Is there a valid case for an empty password?
daemon@ATHENA.MIT.EDU (Weijun Wang)
Thu Oct 11 23:26:18 2018
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
From: Weijun Wang <weijun.wang@oracle.com>
In-Reply-To: <28177C8B-210D-4FD2-9A1A-226D7D827591@oracle.com>
Date: Fri, 12 Oct 2018 11:25:53 +0800
Message-Id: <BAA52B78-23B7-4CD8-B72B-FB3D2161C7F8@oracle.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
I checked the history, sorry for blaming Windows. It was requested by an embedded server vendor.
> On Oct 12, 2018, at 11:19 AM, Weijun Wang <weijun.wang@oracle.com> wrote:
>
> We are planning to disallow empty passwords for PBKDF2 in JDK. However, some years ago I did receive a bug report to support empty passwords on Windows 200x. Is it really a valid password?
>
> Thanks
> Max
>
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
