@lyse@lyse.isobeef.org I can think of one use case for “password truncation”: Avoid DoS. There should be some limit to prevent you from using a base64 encoded 5 GB video file as a password. (Of course, that limit could be something like 1024 bytes instead of 20 bytes …)