Data on confusables

Gervase Markham gerv at mozilla.org
Thu Jul 30 12:24:36 CEST 2009


On 30/07/09 00:13, Mark Davis ⌛ wrote:
> I don't think that IDNA2008 will change much regarding spoofing. Some
> registries may be bound by the terms of IDNA2008, but most will not be.
> They could chose to abide by it strictly, or they could allow characters
> like HEART if they are in demand, or for compatibility with IDNA2003.

They could, but if none of the browsers render it, I suspect they won't.

> Conversely, the client side can't depend on the registries' all doing
> "the right thing", and will need to supply their own tests for spoofing;
> and for them as well, excluding symbols or checking for CONTEXTO
> accomplishes almost nothing as far as detecting spoofs.

I find that an odd conclusion. Banning dot-like, slash-like and 
hyphen-like punctuation seems to me like it would make a big difference 
in terms of restricting what spoofing is possible.

Gerv


More information about the Idna-update mailing list