BugTraq
RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 17 2005 11:20AM
Tosoni (jean-pierre tosoni libertysurf fr) (1 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 18 2005 09:56AM
Riccardo Murri (murri dmmm uniroma1 it)
[Tosoni, Thu, Feb 17, 2005 at 10:20:22AM +0000]
> Back to the original problem, shouldn't the browser check that the
> domain name sought by the user, is only composed from existing keys on
> the user's keyboard, and alert the user otherwise ?

That would restrict US keyboard users from surfing websites with
names from almost any non-English language...

It would probably be a good way to boycott IDN :)

Riccardo

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus