Re: [alac] Mozilla to switch off IDNs and IRIs.

[Thomas Roessler <roessler@xxxxxxxxxxxxxxxxxx>]

On 2005-02-15 04:19:26 -0800, Wendy Seltzer wrote:

> Or to modify the recommendations on how IDNs are displayed, so
> all applications clearly noted that they were showing an IDN.
> Then, if you weren't expecting an IDN (e.g., when you thought you
> were looking at paypal.com and saw [IDN=RU]paypal.com), you'd
> know something was fishy.

I have some doubts about users actually realizing these things -- if
you just count the warning messages from a browser, then almost all
for-pay wireless hotspots out there look fishy.  Still, they make
money.

Also, this approach won't help against the reverse substitution --
imagine some Russian domain name where the lowercase cyrillic a is
replaced by a latin one.

> I'm not sure setting up increasingly complicated tables of what
> registration blocks what others is the answer.

I agree.

Still, the question is on the table if the "one language per name"
rule from ICANN's IDN guidelines actually works (or even can work),
and to what extent it's actually being implemented (or, maybe, to
what extent it's implementable).

> who just saw the folks behind this IDN attack

Which conference? ;-)

-- 
Thomas Roessler · Personal soap box at <http://log.does-not-exist.org/>.