Actually, neither of these solutions is acceptable. The correct solution is:
3) Accept all printing ASCII and Unicode chatacters (including spaces) in the password. See NIST Special Publication 800-63B, Section 5.1.1.2 and Appendix A (https://doi.org/10.6028/NIST.SP.800-63b).
Barring that, 4) All password restrictions should be well documented in documents, help text, and error messages. A password should NEVER be accepted in setup and then rejected in use.
I spent two hours beating my head against this wall until I finally found this post.
Actually, neither of these solutions is acceptable. The correct solution is:
3) Accept all printing ASCII and Unicode chatacters (including spaces) in the password. See NIST Special Publication 800-63B, Section 5.1.1.2 and Appendix A (https://doi.org/10.6028/NIST.SP.800-63b).
Barring that, 4) All password restrictions should be well documented in documents, help text, and error messages. A password should NEVER be accepted in setup and then rejected in use.
I spent two hours beating my head against this wall until I finally found this post.