NASK: statement on homograph attacks

["Andrzej Bartosiewicz" <andrzejb@xxxxxxx>]

Due to the fact, that there are some information in media on the possibility
of "phishing" attack with IDNs we would like to inform that a special
security policy was implemented by NASK (Registry of .PL) in 2003 which
prevents such kind of attacks.

The idea of the security solution is based on the following:
- mixing different language scripts is forbidden which prevents from attacks
based on an exchange of Latin letters for Cyrillic letters which looks
alike.
- the domain names in Cyrillic which were similar to previously registered
domain names in Latin, were blocked for registration the day when Cyrillic
script was launched (February 26, 2004).

Andrzej Bartosiewicz
Head of DNS Department
NASK
18 Wawozowa Street
02-796 Warsaw, Poland

More:
http://www.dns.pl/english/phidn.html
http://www.dns.pl/IDN/idn_intro_eng.html