Re: Unicode domain names issue (Encrypting a "fake" domain name)

On 21/04/17 18:25, Chaddaï Fouché wrote:
> I'm pretty sure most non-technical people don't even look at the url
> bar and don't care about the icons that already appear there : info,
> lock, read mode, zooming state, reload. 

So why do you think adding another icon will solve this problem?

> Adding just one more probably
> won't suddenly overload them and it would allow every technically
> minded people to see instantly if the domain name is in the writing
> system they expect. Your IDN algorithm already compute this
> information anyway.

So we are trying to solve the problem only for technically minded people?

> Your reaction amounting to "we give priority to our ideal of handling
> every language equally over security (of everyone, regardless of
> their language) because we consider 1) that it's the fault of the
> registrars (irrelevant from the user point of view, and unlikely to
> be fixed from that side) and 2) that our users are fragile little
> flowers that will be scared by any additional UI element (that's
> insulting by the way even if a cleaner UI is a worthy goal)" 

Well, that's basically what you just said above :-)

Gerv
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security