Re: Unicode domain names issue (Encrypting a "fake" domain name)
Gervase Markham <[email protected]> Fri, 21 Apr 2017 11:26:31 +0100
| Newsgroups | gmane.comp.mozilla.security |
|---|---|
| Message-ID | <[email protected]> |
On 20/04/17 23:54, Eli the Bearded wrote: > More baked: Using the confusables list from Unicode, if a domain label > consists entirely of letters in one script that are "confusable" to > another (single) script, start raising red flags. So we raise a red flag on http://apple.com, the site for the largest tech company in the world? Or did you mean "if a domain label consists entirely of letters in one non-Latin script..."? If so, we've just got back to a situation of privileging one script over another. Gerv