Skip to content

In case of empty `username` send invalid instead of `login`

The login event can contain empty username and/or password. The login attempt with empty username should be considered as not valid and invalid message should be sent instead of login in SMTP, HTTP, and Telnet.

In FTP it is already implemented (sending invalid when username is missing), bacause username check for the presence is a part of the protocol.

Sentinel_meeting_w48

@mprudek @vmyslivec @kkoci

Edited by Miroslav Hanak
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information