From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS3215 2.6.0.0/16 X-Spam-Status: No, score=-4.1 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_HI, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 02F691F4DA for ; Fri, 27 May 2022 12:28:50 +0000 (UTC) Authentication-Results: dcvr.yhbt.net; dkim=pass (1024-bit key; unprotected) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="dq8MZ8Cu"; dkim-atps=neutral Received: by mail-qk1-x736.google.com with SMTP id j6so4719396qkp.9 for ; Fri, 27 May 2022 05:28:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=FS+BuegzJtVpj/96vKx81Caek2I1l39Vj47pe7UM4IU=; b=dq8MZ8CuYiSBpOOEi6GMnrqZqQo3F4iVbNuwCqRdN8mohNZL8vmluv/8swzZ9Lzg/t lunsGy6oortcBRS6nLIyrgXOQ7tG6ipxbQqVh+afAsV+43wfrxGbfVMgyqGC7U7C2l8t 3WqoEfEOzw4ri6R6UxBqsQbwx5DQMuprhxFRw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=FS+BuegzJtVpj/96vKx81Caek2I1l39Vj47pe7UM4IU=; b=8CckLEUulNG8PlhFm7A1dxHjV3bZKlvkWrzIUKK5iEKUnJx0lCDEliYvxU5RdMRZ/+ 3dRxeoIdCT/Wnr43JANb8Cm974PWVgZvRG2spnvGK3PxHOAOhGSbNwBiSHIK8cehtJwB Qg99oESRRiI1dDgJOe49/AlPx8oLq3fuv3dGGSNykpPxN3olMsJM4/90cMRwsXo1fVC6 tuYO0RpIfLTjZOVt7O/u5NvDlA6KyzvfY8rJAYS/ls6fKGQZcVN7QhJ5phbIV3QlTE1a xtI9+9C81154N+Ka0P+GQLgdLNTnnYY21QaER8SNIc5AA2Uj0qYi4b9C0C+i4QbplIEU kWwg== X-Gm-Message-State: AOAM531dRIJrrof4L+udfJdbRZByN1ifoMH4thuo7IoA46pyIMLOS/p8 FADYXEebJnkL3nv4XC9x1qP5pevZ5hu6DA== X-Google-Smtp-Source: ABdhPJzliGiEH78wCXBQfmN0VtNdT9pNoqoZFx2tY9HNiBSIYl60mDJgmvbnSeevVbkDDmSuGgSRpQ== X-Received: by 2002:a05:620a:2588:b0:680:f657:fbd6 with SMTP id x8-20020a05620a258800b00680f657fbd6mr27627218qko.287.1653654528419; Fri, 27 May 2022 05:28:48 -0700 (PDT) Received: from meerkat.local (bras-base-mtrlpq5031w-grc-30-209-226-106-245.dsl.bell.ca. [209.226.106.245]) by smtp.gmail.com with ESMTPSA id r13-20020a05622a034d00b002fc12020a1esm2596763qtw.80.2022.05.27.05.28.47 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 27 May 2022 05:28:48 -0700 (PDT) Date: Fri, 27 May 2022 08:28:46 -0400 From: Konstantin Ryabitsev To: Eric Wong Cc: meta@public-inbox.org Subject: Re: APOP-only POP3 clients? Message-ID: <20220527122846.ko7nenbhnwrgixqt@meerkat.local> References: <20220527105302.M842323@dcvr> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20220527105302.M842323@dcvr> List-Id: On Fri, May 27, 2022 at 10:53:02AM +0000, Eric Wong wrote: > Which may be an extremely long username... Now I'm thinking > it's safe for UUID_1 and UUID_2 to be the same, to save storage > space on the server and to save users from dealing with > excessively long, compression-unfriendly field entries. So, > this: > username: $UUID@$NEWSGROUP.$SLICE > password: $UUID 1. I'd even say that we don't need all the entropy of uuid here and it's probably sufficient to grab 8-12 bytes from /dev/random and z-base-32 encode them (z-base-32 to produce case-insensitive strings) 2. You can make password be "p" :) -K