LWN.net Logo

Suggested Extension to Fix

Suggested Extension to Fix

Posted Feb 22, 2005 17:08 UTC (Tue) by Max.Hyre (subscriber, #1054)
Parent article: New IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine)

Having skimmed the Punycode spec. (RFC 3942), I can see that the fix is moderately effective, at least for URLs already in ASCII. It's also a pain for someone reading, say, Hindi who wants to actually read the URL.

As an addition to the temporary fix, how about adding a button next to the URL display which, when pressed, will convert the URL to Unicode so it can actually be read? That sounds relatively doable to one who hasn't checked the source. :-) (By `URL display', I mean the URL-entry bar at the top, where one can see the URL currently visited, and may type in a new URL.)

In addition, it's desirable, and probably more important, to show the URL about to be clicked on, before the click. It's tougher, because a button won't work while hovering. Maybe, when hovering, convert the info line at the bottom into two lines, showing both the Punycode and the readable text?


(Log in to post comments)

Suggested Extension to Fix

Posted Feb 24, 2005 13:55 UTC (Thu) by hummassa (subscriber, #307) [Link]

This sounds like a good idea -- maybe the tooltip to the url bar?

But... it would open another can of worms...

For instance, if you have two similar, but different, non-Latin glyphs, the only way to make certain that you are in the site for your bank is what it seems is knowing the punycode name.

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds