Re: nameprep2 and the slash homograph issue

Erik van der Poel <[email protected]> Wed, 23 Feb 2005 07:28:20 -0800
Newsgroups gmane.ietf.idn
Message-ID <[email protected]>
Adam,

The IETF generally only specifies the "wire" protocol, not UI behavior. 
The IETF does not specify how apps interface with users; it only 
specifies how apps interface with other apps, over the wire. Note that 
this does not even include APIs in many cases.

However, it *would* be very wise to *warn* implementors about any 
dangerous homographs in the new RFC (if we decide not to ban them outright).

Erik

Adam M. Costello wrote:
> But browser implementers want to protect their users today against
> malicious names that may exist in the DNS today.  I don't see how
> this proposal would help them do that.  Browser implementors are
> comtemplating banning characters in IDNs the browser (that is, failing
> to look up names containing blacklisted characters), and I was trying
> to think of a less drastic, less blatantly nonconformant, but equally
> protective measure that could be taken in the browser.