|
BugTraq
RE: thoughts and a possible solution on homograph attacks Mar 07 2005 08:05PM Scovetta, Michael V (Michael Scovetta ca com) (2 replies) Re: houghts and a possible solution on homograph attacks Mar 08 2005 06:50PM Sven Putteneers (svennieboy linux be) (1 replies) Re: houghts and a possible solution on homograph attacks Mar 09 2005 12:48AM Nick FitzGerald (nick virus-l demon co uk) (1 replies) Re: Thoughts and a possible solution on homograph attacks Mar 11 2005 10:42AM Paul Smith (paullocal pscs co uk) (1 replies) Re: Thoughts and a possible solution on homograph attacks Mar 15 2005 11:27AM Riccardo Murri (murri dmmm uniroma1 it) (2 replies) Re: Thoughts and a possible solution on homograph attacks Mar 16 2005 12:10AM khockenb (khockenb stevens edu) (1 replies) Re: Thoughts and a possible solution on homograph attacks Mar 16 2005 10:02AM Riccardo Murri (riccardo murri ictp it) Re: thoughts and a possible solution on homograph attacks Mar 08 2005 12:33PM Mike Nice (niceman att net) |
|
Privacy Statement |
> I would rather suggest that the string comparison function used in IDN
> takes "homograph caracters"[1] into account: just like the current DNS
> considers 'a' == 'A', the IDN DNS should consider "LATIN SMALL LETTER
> a" == "CYRILLIC SMALL LETTER a" == "CYRILLIC CAPITAL LETTER A" ==
> "GREEK CAPITAL LETTER A"[2], and similarly for the other homograph chars.
The problem here is that defining what characters are "similar" enough to be
homographs is a very fuzzy concept. Glyphs that may look similar on a 1600x1200
display on my laptop may not look similar when the *same exact* 1600x1200 is
being displayed on the 21" monitor hanging off my docking station. Also, the
point size in use may matter - that macron that's easily visible at 15pt may be
invisible at 11pt. Bitmap and outline fonts will have different behaviors
in this regard, and anti-aliasing adds another twist to the equations....
And even if you program all *that* sort of knowledge in, there's no way in the
near future that the software will know if I'm wearing my contacts or if I'm
wearing my glasses, and if I'm wearing contacts, if I happen to have my reading
glasses handy.....
[ reply ]