Re: IDN problem.... :(

From: Dean Snyder (
Date: Thu Feb 10 2005 - 20:12:51 CST

  • Next message: Neil Harris: "Re: IDN problem.... :("

    Addison Phillips [wM] wrote at 5:17 PM on Thursday, February 10, 2005:

    >I disagree. There are plenty of cases in which scripts are mixed
    >naturally in languages that use non-Latin scripts. For example, many
    >languages use the Latin digits in preference to native script digits.
    >Should we allow the Latin digits into a non-ASCII domain name? Oh, the
    >slippery slope...

    Browsers should be configurable to allow, but default to, displaying a
    warning before going to a mixed-script domain name.

    >For that matter, I can construct a perfect "paypal" string using ONLY
    >Cyrillic letters. Restrictions to one script doesn't prevent the
    >homograph attack. It just requires one to be more clever.

    Single-script domain names visually similar to names in other scripts
    should be disallowed.


    Dean A. Snyder

    Assistant Research Scholar
    Manager, Digital Hammurabi Project
    Computer Science Department
    Whiting School of Engineering
    218C New Engineering Building
    3400 North Charles Street
    Johns Hopkins University
    Baltimore, Maryland, USA 21218

    office: 410 516-6850
    cell: 717 817-4897

    This archive was generated by hypermail 2.1.5 : Thu Feb 10 2005 - 20:16:50 CST