Re: Unicode domain names issue (Encrypting a "fake" domain name)

Boris Zbarsky <[email protected]> Tue, 18 Apr 2017 17:00:24 -0400
Newsgroups gmane.comp.mozilla.security
Message-ID <[email protected]>
On 4/18/17 4:52 PM, Kyle Hamilton wrote:
> Why not display the encoding of the host name in the area with the
> security indicator, to the left of the address bar?  That is the area
> where security-related displays are already made.

Here's a question that I think any proposal here should be able to 
address:  Given two strings of glyphs, both non-ASCII, which are 
homographs of each other, does the proposed solution help?

I think showing two different blobs of "xn--****" noise does not help 
distinguish cases like that, unless someone is doing a careful 
side-by-side comparison.

-Boris