From: Werner LEMBERG (wl@gnu.org)
Date: Thu Feb 10 2005 - 23:30:23 CST
> > >For that matter, I can construct a perfect "paypal" string using
> > >ONLY Cyrillic letters. Restrictions to one script doesn't prevent
> > >the homograph attack. It just requires one to be more clever.
Without knowing the IDN standard: Why not adding a character to the
IDN string which gives a checksum (MD5 or something similar) of the
string to be displayed? This character would stay unrendered, and it
makes it virtually impossible to fake an address with a different
script.
Werner
This archive was generated by hypermail 2.1.5 : Fri Feb 11 2005 - 01:49:47 CST