PetNames --- a solution to the Homograph URL and Phishing problem. [LWN.net]

PetNames --- a solution to the Homograph URL and Phishing problem.

Posted Feb 22, 2005 23:05 UTC (Tue) by AnswerGuy (guest, #1256)
In reply to: IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine) by ballombe
Parent article: New IDN Homograph Spoofing Response: IDN Will Not Be Disabled (MozillaZine)

There are possible solutions. None will work for everyone. There are too many people who are way too gullible or lazy. However, there are technical means to mitigate the majority of the problem and give any reasonable competent and motivated person the level of protection they need to avoid being hooked by phishing scams.

I don't have time or space to cover the full range of this dicussion. However, a couple of pointers may serve:

Sorry I don't have time to actually cover the details here. It would be a timely topic for one of LWN's feature articles Hint!, Hint!

Basically the short form of the mozilla component to the solution is to have color coding and "Pet" icons next to those URL references that are "known good" (because they are among your personally configured list of "PetNames"). The details of how URLs get adopted as pets are the tricky part --- just as the whole matter of key management is the hardest challenge of modern cryptography.

JimD

(Log in to post comments)