Re: Re: nameprep, IDN spoofing and the registries

Jefsey,

Which ccTLDs do you intend to propose this experiment? If you don't mind 
revealing...
Have these ccTLDs rolled out IDN implementation? If so, do they 
currently employ a character table of sorts?\

> 1. could someone point a "C" source code to carry what has to be 
> carried to filter out the dangerous names? Please help: I have no 
> resource on this.


I'm not sure what exactly you need. If you have the tables it should be 
fairly trivial to write some functions in C to filter names. Make sure 
your inputs are properly normalized and just compare the 
to-be-registered name against your blacklist, reject the name on any match.

> 2. could someone list all the Unicode codes to blacklist that way?


If character tables are used, they effectively serve as a whitelist. If 
you wish to disallow any character from being registered, just make sure 
that it's not on the whitelist.

> 3. could someone point a Perl code to use to enter a IDN and to get it 
> properly punycoded, which could use such a list.
>

Try  Net::LibIDN (http://spaceship.berlios.de/index.php?page=idn.php) 
which is a Perl binding for GNU Libidn. It seems to have some support 
for character inclusion list, not sure about blacklists though.

Regards,
wil.