Re: Unicode domain names issue (Encrypting a "fake" domain name)

Gervase Markham <[email protected]> Tue, 25 Apr 2017 10:16:18 +0100
Newsgroups gmane.comp.mozilla.security
Message-ID <[email protected]>
On 24/04/17 12:40, Robert Kaiser wrote:
> I think, in hindsight, it was a bad idea to abandon the whitelisting
> approach

I don't agree. If ubiquity of IDNs is a goal, every IDN-using client
having its own whitelist would kill that goal stone dead.

> That said, if any activities on the side of registires cannot be reached
> fast, I fear we need to ship "somthing" in Firefox that doesn't
> "something" to help or we risk being stamped "insecure" or
> "phisihing-friendly" even if that's not true.

So you are suggesting we prioritize product changes based on
ill-informed media pressure?

Gerv