IDN processing-related security considerations for draft-ietf-websec-strict-transport-sec

Andrew Sullivan ajs at
Fri Sep 30 21:57:20 CEST 2011

On Fri, Sep 30, 2011 at 10:24:37PM +0300, Patrik Fältström wrote:
> Or are they calling normalization functions that happens to be of the version of the unicode version that is installed on the operating system of their choice?

I'm especially worried about this one.  I'd have thought that the
Unicode version agnosticism in IDNA2008 would be a strong incentive to
upgrade, but I guess not.


Andrew Sullivan
ajs at

More information about the Idna-update mailing list