UTF-8
Nick Teint
nick.teint at googlemail.com
Sat Jun 26 11:54:22 CEST 2010
2010/6/17 Nicolas Williams <Nicolas.Williams at oracle.com>:
> On the one hand, I agree: ACE leakage into UIs is bad, therefore ACE
> avoidance is good.
Sometimes, you _do_ want ACEs to leak into the UI:
1. Your user does not know the script. Displaying an ugly ACE string
is better than displaying some known-to-be-unrecognisable characters.*
2. You don't have the fonts. Displaying an ugly ACE string is better
than displaying "???????".
3. The string contains conspicuous confusables. Displaying an ugly ACE
string is better than displaying a maliciously-crafted string.
NT
PS: * For this purpose, it might even make sense to define
Script-Compatible Encodings (SCEs) for scripts other than Latin/ASCII.
More information about the Idna-update
mailing list