[Eric] Unable to register with issue tracker

[Boylan, Ross]

OK.  The failed otk had a 3D at the end, so maybe that was one of those quoting characters that ended up on the forwarded URL when it shouldn't have.  But it seems odd the perimeter software wouldn't know how to clean up after itself.

________________________________________
From: Henrik Pauli <henrik.pauli at gmail.com>
Sent: Tuesday, December 10, 2019 4:26 AM
To: Boylan, Ross
Cc: eric at riverbankcomputing.com
Subject: Re: [Eric] Unable to register with issue tracker

I'm not associated with Eric or Riverbank Computing or any of these
places, I'm just a random subscriber to the mailing list.

On 09/12/2019 18:43, Boylan, Ross wrote:
> Can you tell me what the original URL was?
>
> I expect that what's supposed to happen is that the original URL gets escaped as necessary (aka "mangled"), tacked on at the end of a redirect to our security service, proofpoint.com, and that when they get the URL they reverse the translation, decide if it's OK, and (usually) send it on.  The odd thing here was that it was not blocked, but it was messed up.
>
> Is the error message I got from your site what you would expect if the URL were used twice?  Maybe if proofpoint.com did a "pre-check" that would explain why it failed.
> Ross
>
> ________________________________________
> From: Henrik Pauli <henrik.pauli at gmail.com>
> Sent: Monday, December 9, 2019 3:46 AM
> To: Boylan, Ross
> Cc: eric at riverbankcomputing.com
> Subject: Re: [Eric] Unable to register with issue tracker
>
> Sounds like an issue with your email system than anything else.  Best if you take it to your sysadmins.
>
> 3D is the ASCII code of the equals sign, so it could be that something mangled URL encoding or Quoted-Printable encoding (both use an escape character -- % and =, respectively -- and the byte code of the character escaped), and this is why whatever you click on doesn't seem to lead anywhere.  If there are URLs that are use-once, them checking on them and opening them might be even worse.
>
> On Sat, 7 Dec 2019 at 08:24, Boylan, Ross <Ross.Boylan at ucsf.edu<mailto:Ross.Boylan at ucsf.edu>> wrote:
> I tried to create an account with the eric issue tracker; it emailed me a message instructing me to click on a link to complete the process.  When I did so, I reached the site but a banner near the top said 'No such otks "wfk4....."' where ... represents a long string of characters.
>
> This mailing list also wanted me to click on a URL to confirm, but offered an email reply as an alternative, which I think worked.
>
> Our local security software rewrites all URLs in email to route them through some security system, but I believe they end up resolving to the original URL, which is part of the rewritten URL.  The rewritten URL appears to have 3D immediately before the code indicated in the message, and it looks as if 3X (where X is various letters) might be some kind of separator.
>
> At any rate, if there's some way to register that would be nice.
>
> Ross
> _______________________________________________
> Eric mailing list
> Eric at riverbankcomputing.com<mailto:Eric at riverbankcomputing.com>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.riverbankcomputing.com_mailman_listinfo_eric&d=DwICaQ&c=iORugZls2LlYyCAZRB3XLg&r=nh70E5-mX2XsDe5lrDDMt_ZRqqGMcdTmTrRLvNmttYA&m=mbQvFc_4e6Kd76HdbVlWjIpPIwZ5pCiLvtGGhXIFIS4&s=nyEPMM0fLzGLnGuSDlkhHmhjhQ5dqTkVPWAbBXcHRJw&e= <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.riverbankcomputing.com_mailman_listinfo_eric&d=DwMFaQ&c=iORugZls2LlYyCAZRB3XLg&r=nh70E5-mX2XsDe5lrDDMt_ZRqqGMcdTmTrRLvNmttYA&m=6TIzJbkj3rqKgkzSfL3JDF9zawKJTr_D8dbzgUPVmJE&s=gpTbgwYChb1gVbQxwUL36x6F6XixhuK3HNc2lVq7a_0&e=>