The curious case of the missing period

Original Article ↗ Hacker News Discussion ↗

Root cause and SMTP mechanics

  • Many immediately recognized the bug as SMTP “dot-stuffing”: a line containing only . terminates the DATA section, so literal leading dots must be escaped and later unescaped.
  • The homegrown SMTP client split lines at the 1000‑octet limit without dot-stuffing, so a decimal point at the split became the first character on the next line and was then stripped by the server.
  • Several link to relevant RFCs and note POP3 has a similar dot rule.
  • Some clarify that HTML doesn’t ignore newlines; they collapse into spaces, so 27.00 could become 27 00 or 2700 depending on how it’s mangled.

“Roll your own” vs libraries

  • Strong consensus: implementing SMTP clients by hand is risky; robust libraries or standard tools should be used.
  • Counterpoint: libraries can drag in heavy dependency trees and CVEs, but others argue this is manageable and usually worth it.

Protocol design, specs, and abstraction

  • Split views on whether this is a protocol problem or purely an implementation “skill issue.”
  • Critics call SMTP an archaic, text-based protocol with in-band signaling and footguns (like CRLF . CRLF), arguing modern designs should use length-prefixing or structured formats.
  • Defenders note historical constraints: low-powered hardware, non–binary-transparent links, and the 1980s context.
  • Recurrent theme: you must read and respect specs and work at the right abstraction level, not “glue strings” (parallels drawn to SQL injection, XSS, and HTML templating).

Email ecosystem pain

  • Several say email and its stack (SMTP, MIME, DKIM/DMARC, etc.) are overly complex and fragile; some wish it would be replaced by modern messaging protocols.
  • Others note that despite flaws, SMTP “won” over more formally designed systems like X.400.

Cron jobs and sending mail

  • Many question why a cron job implemented its own SMTP client instead of using system MTAs, mail utilities, or SaaS providers.
  • Others respond that many environments lack a properly configured MTA, leading software authors to embed SMTP clients anyway.

Anecdotes and meta

  • Multiple commenters share war stories of subtle protocol bugs and “curious cases.”
  • Side discussion on “secret codes” in recommendation letters and on how missing punctuation can carry unintended meaning.