> I'd prefer a flag that I have to _enable_ to have the library verify my > damn keys. Let the user do what he wants to do and don't expect every > client user to be a moron. (just like the stupid ubuntu installations that > adds all sorts of stupid aliases for rm etc).
Most users won't ever know what the protocol is, so they won't know that spaces or newlines are even a problem until after it's a problem. Just document the damn flag right; for bonus points have the client spit back an error that's googleable to a specific response explaining the situation. Then they can try it, whoops, understand it, and turn it off if they don't give a fuck. Damn.