Re: Unicode domain names issue (Encrypting a "fake" domain name)
Boris Zbarsky <[email protected]> Thu, 20 Apr 2017 23:55:17 -0400
| Newsgroups | gmane.comp.mozilla.security |
|---|---|
| Message-ID | <[email protected]> |
On 4/20/17 6:54 PM, Eli the Bearded wrote: > More baked: Using the confusables list from Unicode, if a domain label > consists entirely of letters in one script that are "confusable" to > another (single) script, start raising red flags. So just to be clear, per that proposal we should be raising red flags on the "real" epic.com and keep.com and so forth, right? -Boris