IDN processing-related security considerations for draft-ietf-websec-strict-transport-sec

Andrew Sullivan ajs at anvilwalrusden.com
Fri Sep 30 21:57:20 CEST 2011


On Fri, Sep 30, 2011 at 10:24:37PM +0300, Patrik Fältström wrote:
> Or are they calling normalization functions that happens to be of the version of the unicode version that is installed on the operating system of their choice?
> 

I'm especially worried about this one.  I'd have thought that the
Unicode version agnosticism in IDNA2008 would be a strong incentive to
upgrade, but I guess not.

A

-- 
Andrew Sullivan
ajs at anvilwalrusden.com



More information about the Idna-update mailing list