[Patches] [ python-Patches-497420 ] ftplib: ftp anonymous password

[noreply@sourceforge.net]

Patches item #497420, was opened at 2001-12-28 12:30
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=305470&aid=497420&group_id=5470

Category: Library (Lib)
Group: None
>Status: Closed
>Resolution: Accepted
Priority: 5
Submitted By: Eduardo Pérez (eperez)
>Assigned to: Guido van Rossum (gvanrossum)
Summary: ftplib: ftp anonymous password

Initial Comment:
I've seen that ftplib sends the user name when doing
ANONYMOUS ftp gets.
I see a lot of problems:
- Sending the user name if the user doesn't know that
it's sent doesn't protect the user state of ANONYMOUS
- Spyware is not a good idea, most users don't like it.
- Sending the user name helps SPAM instead of stopping
it. Many ftp sites use this information to send you
unsolicited email.
- Sending the user name doesn't help ftp sites to know
who the cracker is, crackers are not stupid to send
their email address.
- Sending the user name can be used to discriminate the
user.

By all of these reasons I argue that ftplib to don't
send the user email by default.

Some time ago two very important ftp clients wget and
lftp stopped sending the user name as password based on
my input.

As more and more ftp clients are moving to this
anonymous@ password (for example the kde kio ftp, qt3,
gnome-xml, Net::FTP)
I recommend you to apply the patch.

I send you the bugfix.


----------------------------------------------------------------------

>Comment By: Guido van Rossum (gvanrossum)
Date: 2001-12-28 12:55

Message:
Logged In: YES 
user_id=6380

Thanks! You're right. Checked in as ftplib.py 1.63.



----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=305470&aid=497420&group_id=5470