I think it&#x27;s okay when dealing with input from hairless monkeys. That people just aren&#x27;t particularly consistent is part of the problem domain.<p>Not so okay when dealing with input created by programs.<p>And as you said totally not okay when dealing with protocols, encryption, and authentication. See padding attacks.