> how many names do you run into with equal signs in them? That's not the issue ... I have not personally tried this or examined it, it looks like you can chan

> how many names do you run into with equal signs in them? That's not the issue ... I have not personally tried this or examined it, it looks like you can change the state of the header parser by including interesting characters in your name. I am not sure if this is server-side or client-side. If the problem is server side, there is a chance you could tweak the strings to get interesting results. But trying to prove that this is a serious problem without explicit authorization will likely have adverse consequences for anyone who does, so only people who are already doing shady stuff explore it.