Re: Unicode domain names issue (Encrypting a "fake" domain name)

Gervase Markham <[email protected]> Fri, 21 Apr 2017 11:26:31 +0100
Newsgroups gmane.comp.mozilla.security
Message-ID <[email protected]>
On 20/04/17 23:54, Eli the Bearded wrote:
> More baked: Using the confusables list from Unicode, if a domain label
> consists entirely of letters in one script that are "confusable" to
> another (single) script, start raising red flags.

So we raise a red flag on http://apple.com, the site for the largest
tech company in the world?

Or did you mean "if a domain label consists entirely of letters in one
non-Latin script..."? If so, we've just got back to a situation of
privileging one script over another.

Gerv