Re: Unicode domain names issue (Encrypting a "fake" domain name)
Boris Zbarsky <[email protected]> Tue, 18 Apr 2017 17:00:24 -0400
| Newsgroups | gmane.comp.mozilla.security |
|---|---|
| Message-ID | <[email protected]> |
On 4/18/17 4:52 PM, Kyle Hamilton wrote: > Why not display the encoding of the host name in the area with the > security indicator, to the left of the address bar? That is the area > where security-related displays are already made. Here's a question that I think any proposal here should be able to address: Given two strings of glyphs, both non-ASCII, which are homographs of each other, does the proposed solution help? I think showing two different blobs of "xn--****" noise does not help distinguish cases like that, unless someone is doing a careful side-by-side comparison. -Boris