Re: [idn] Mac OS X Safari and IDN spoofing

James Seng <james@seng.cc> Tue, 22 March 2005 22:49 UTC

Received: from psg.com (mailnull@psg.com [147.28.0.62]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA16273 for <idn-archive@lists.ietf.org>; Tue, 22 Mar 2005 17:49:59 -0500 (EST)
Received: from majordom by psg.com with local (Exim 4.44 (FreeBSD)) id 1DDs7m-0002cu-F3 for idn-data@psg.com; Tue, 22 Mar 2005 22:45:22 +0000
Received: from [203.117.75.21] (helo=red-aura.com) by psg.com with esmtps (TLSv1:DES-CBC3-SHA:168) (Exim 4.44 (FreeBSD)) id 1DDs7k-0002cN-NH for idn@ops.ietf.org; Tue, 22 Mar 2005 22:45:21 +0000
Received: (qmail 50209 invoked from network); 22 Mar 2005 22:48:43 -0000
Received: from bb220-255-106-19.singnet.com.sg (HELO ?192.168.15.88?) (jseng@220.255.106.19) by red-aura.com with RC4-SHA encrypted SMTP; 22 Mar 2005 22:48:43 -0000
In-Reply-To: <4240917F.30801@mozilla.org>
References: <p06210212be663c22ba1c@[10.20.30.249]> <4240917F.30801@mozilla.org>
Mime-Version: 1.0 (Apple Message framework v619.2)
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Message-Id: <9271f2a6d20072ae7e9f1cf9e74cce45@seng.cc>
Content-Transfer-Encoding: 7bit
Cc: idn@ops.ietf.org
From: James Seng <james@seng.cc>
Subject: Re: [idn] Mac OS X Safari and IDN spoofing
Date: Wed, 23 Mar 2005 06:45:13 +0800
To: Gervase Markham <gerv@mozilla.org>
X-Mailer: Apple Mail (2.619.2)
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on psg.com
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.0.1
Sender: owner-idn@ops.ietf.org
Precedence: bulk
Content-Transfer-Encoding: 7bit

i thought the ideas they have was pretty interesting

choose the scripts you use most often that you like to display normally 
but otherwise, will display in punycode.

a good short term solution so i expect them to evolve over time as we 
gain more experience.

now, do we want to standard "this" or do we want apps people to 
continue to evolve the mechanism to deal with spoofing? i prefer the 
latter.

james

On 23-Mar-05, at AM 05:43, Gervase Markham wrote:

> Paul Hoffman wrote:
>> Another browser vendor's solution: 
>> <http://docs.info.apple.com/article.html?artnum=301116>.
>
> I suspect that this is also an interim solution, like the one 
> mozilla.org came up with. I would hope they can find a better way than 
> freezing out the Greeks, Cherokee Indians and Russians permanently. 
> :-)
>
> Gerv
>