LWN.net Logo

New IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine)

New IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine)

Posted Feb 22, 2005 17:29 UTC (Tue) by man_ls (subscriber, #15091)
In reply to: New IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine) by danielos
Parent article: New IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine)

punycode may not be the panacea, but that does not mean that there is no long-term solution.

See, the main problem seems to appear when mixing characters from different sets, e.g. "amazon" with a greek omicron, or latin names with other non-latin caracters. The long-term solution might be therefore to divide characters into sets according to alphabet (latin, greek, russian, hindi...) and show punycode only when some characters are from different sets. Otherwise, all-greek domain names should appear in Greek characters, all-hindi in Hindi...


(Log in to post comments)

New IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine)

Posted Feb 24, 2005 13:04 UTC (Thu) by ibukanov (subscriber, #3942) [Link]

> Otherwise, all-greek domain names should appear in Greek characters, all-hindi in Hindi...

It would not work in general. Depending on a font used you may or may not spot the difference between "paypal" and its equivalent written with only Cyrillic letters and digit 1, "раура1".

P.S. To view the Cyrillic letter properly in the above please set the encoding for the page to UTF-8. LWN unfortunately still uses Latin-1 which is quite ironic for the pages that talk about Unicode.

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds