Mixing scripts (Re: Unicode versions (Re: Criteria for
exceptional characters))
Gervase Markham
gerv at mozilla.org
Thu Dec 21 11:45:56 CET 2006
Michael Everson wrote:
> The reason I suggest it is that it is SAFER. If the actual protocol
> actually disallows mixing in labels, rogues cannot spoof. AT ALL. And I
> mean even in other levels of the label, like preventing
> http://paypal.evertype.com with a Cyrillic <a> or <p>. If the actual
> protocol bans this behaviour (apart from permitted mixing as for
> Japanese or Korean), the Internet is made safer.
Why would you, the owner of evertype.com, want to spoof people visiting
your subdomains?
I don't think there's much disagreement that script mixing should be
banned in almost all cases. The question arises about where best to
implement the ban. If we are certain we can forsee all possible needs
for script mixing now, perhaps we could put it in the IDNA standard.
> The only reason I can think of for allowing the mixing of Latin,
> Cyrillic, and Greek letters is to allow registrars and/or registries
> make bucketloads of money on such mixed labels.
I agree entirely.
Gerv
More information about the Idna-update
mailing list