From: Dean Snyder (dean.snyder@jhu.edu)
Date: Thu Feb 10 2005 - 20:12:51 CST
Addison Phillips [wM] wrote at 5:17 PM on Thursday, February 10, 2005:
>I disagree. There are plenty of cases in which scripts are mixed
>naturally in languages that use non-Latin scripts. For example, many
>languages use the Latin digits in preference to native script digits.
>Should we allow the Latin digits into a non-ASCII domain name? Oh, the
>slippery slope...
Browsers should be configurable to allow, but default to, displaying a
warning before going to a mixed-script domain name.
>For that matter, I can construct a perfect "paypal" string using ONLY
>Cyrillic letters. Restrictions to one script doesn't prevent the
>homograph attack. It just requires one to be more clever.
Single-script domain names visually similar to names in other scripts
should be disallowed.
Respectfully,
Dean A. Snyder
Assistant Research Scholar
Manager, Digital Hammurabi Project
Computer Science Department
Whiting School of Engineering
218C New Engineering Building
3400 North Charles Street
Johns Hopkins University
Baltimore, Maryland, USA 21218
office: 410 516-6850
cell: 717 817-4897
www.jhu.edu/digitalhammurabi/
http://users.adelphia.net/~deansnyder/
This archive was generated by hypermail 2.1.5 : Thu Feb 10 2005 - 20:16:50 CST