swicg / activitypub-webfinger

SocialCG report for using ActivityPub with Webfinger
7 stars 0 forks source link

Case sensitivity of usernames #14

Closed tesaguri closed 3 months ago

tesaguri commented 4 months ago

Many existing implementations compare usernames case-insensitively, but neither RFC 7033 (WebFinger) nor RFC 7565 (The ’acct’ URI Scheme) specifies such a behavior (except for the case-normalization rule for percent-encoded hex digits).

Exceptionally, now-unmaintained Wildebeest compared usernames case-sensitively, which had caused interoperability issues with other implementations like misskey-dev/misskey#10571. To prevent similar problems, I think the report should advise to compare usernames case-insensitively, at least for local ones.