Re: Unicode domain names issue (Encrypting a "fake" domain name)

Boris Zbarsky <[email protected]> Tue, 18 Apr 2017 11:54:27 -0400
Newsgroups gmane.comp.mozilla.security
Message-ID <[email protected]>
On 4/18/17 6:03 AM, Igor Bukanov wrote:
> There is a difference between domains for non-latin scripts and an
> xn-- domain that represents a name that can also be written using
> plain latin letters. It is just too bad that registrars are allowed to
> issues such certificates. So as a simple heuristic a browser can show
> the domain as xn-- if it encodes a name that does not require xn--
> encoding.

Note that this would not have helped with the "epic.com" case,because 
the actual Unicode characters involved were not ASCII and hence did need 
the xn-- encoding.

-Boris