Re: Unicode domain names issue (Encrypting a "fake" domain name)

Eli the Bearded <*@eli.users.panix.com> Tue, 18 Apr 2017 14:57:49 -0500

Newsgroups	gmane.comp.mozilla.security
Organization	Some absurd concept
Message-ID	<[email protected]>

In mozilla.dev.security, Daniel Veditz  <[email protected]> wrote:
> > So as a simple heuristic a browser can show
> > the domain as xn-- if it
> encodes a name that does not require xn--encoding.
> 
> Are there are no legitimate Russian words made only of the 11 or so
> letters that look like latin script?

The original example was one.

U+0435     е     CYRILLIC SMALL LETTER IE
U+0440     р     CYRILLIC SMALL LETTER ER
U+0456     і     CYRILLIC SMALL LETTER BYELORUSSIAN-UKRAINIAN I
U+0441     с     CYRILLIC SMALL LETTER ES

Which is a given name. It's better than the old ѕсоре example, which
doesn't seem to have any Russian look-a-likes.

Elijah
------
has seen ѕсоре.com next to рaypal.com in IDN warning documents
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security