Re: Unicode domain names issue (Encrypting a "fake" domain name)
Boris Zbarsky <[email protected]> Tue, 18 Apr 2017 11:54:27 -0400
| Newsgroups | gmane.comp.mozilla.security |
|---|---|
| Message-ID | <[email protected]> |
On 4/18/17 6:03 AM, Igor Bukanov wrote: > There is a difference between domains for non-latin scripts and an > xn-- domain that represents a name that can also be written using > plain latin letters. It is just too bad that registrars are allowed to > issues such certificates. So as a simple heuristic a browser can show > the domain as xn-- if it encodes a name that does not require xn-- > encoding. Note that this would not have helped with the "epic.com" case,because the actual Unicode characters involved were not ASCII and hence did need the xn-- encoding. -Boris