[idn] Re: process

Stephane Bortzmeyer <bortzmeyer@nic.fr> Fri, 25 February 2005 11:50 UTC

Received: from psg.com (mailnull@psg.com [147.28.0.62]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA03985 for <idn-archive@lists.ietf.org>; Fri, 25 Feb 2005 06:50:07 -0500 (EST)
Received: from majordom by psg.com with local (Exim 4.44 (FreeBSD)) id 1D4drc-0005GC-0z for idn-data@psg.com; Fri, 25 Feb 2005 11:42:32 +0000
Received: from [192.134.4.10] (helo=mx1.nic.fr) by psg.com with esmtp (Exim 4.44 (FreeBSD)) id 1D4drY-0005Fi-M6 for idn@ops.ietf.org; Fri, 25 Feb 2005 11:42:28 +0000
Received: from localhost (unknown [127.0.0.1]) by mx1.nic.fr (Postfix) with ESMTP id B272394008; Fri, 25 Feb 2005 12:42:27 +0100 (CET)
Received: from maya20.nic.fr (maya20.nic.fr [192.134.4.152]) by mx1.nic.fr (Postfix) with ESMTP id 83E4494005; Fri, 25 Feb 2005 12:42:26 +0100 (CET)
Received: from batilda.nic.fr (postfix@batilda.nic.fr [192.134.4.69]) by maya20.nic.fr (8.12.4/8.12.4) with ESMTP id j1PBbQ4u1417997; Fri, 25 Feb 2005 12:37:26 +0100 (CET)
Received: by batilda.nic.fr (Postfix, from userid 1000) id F3CB416A980; Fri, 25 Feb 2005 12:37:25 +0100 (CET)
Date: Fri, 25 Feb 2005 12:37:25 +0100
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: Doug Ewell <dewell@adelphia.net>
Cc: idn@ops.ietf.org, Erik van der Poel <erik@vanderpoel.org>
Subject: [idn] Re: process
Message-ID: <20050225113725.GA8820@nic.fr>
References: <D872CCF059514053ECF8A198@scan.jck.com> <421D8411.9030006@vanderpoel.org> <p06210208be4390618c81@[192.168.0.101]> <421E0D0C.2000309@vanderpoel.org> <p06210202be43c3888991@[192.168.0.101]> <E07CE813AD23B2D95DA0C740@scan.jck.com> <421E30F2.1040408@vanderpoel.org> <0E7F74C71945B923C52211F3@scan.jck.com> <421EA0C9.1010500@vanderpoel.org> <00a401c51af3$7863aae0$030aa8c0@DEWELL>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <00a401c51af3$7863aae0$030aa8c0@DEWELL>
X-Operating-System: Debian GNU/Linux 3.1
X-Kernel: Linux 2.6.8-1-686 i686
Organization: NIC France
X-URL: http://www.nic.fr/
User-Agent: Mutt/1.5.6+20040907i
X-Virus-Scanned: by amavisd-new at mx1.nic.fr
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on psg.com
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=ham version=3.0.1
Sender: owner-idn@ops.ietf.org
Precedence: bulk

On Thu, Feb 24, 2005 at 08:35:43PM -0800,
 Doug Ewell <dewell@adelphia.net> wrote 
 a message of 26 lines which said:

> Is it really possible that we spent a year and a half, two years on
> putting together an IDN architecture, and during all that time
> nobody ever gave the slightest thought to the possibility of someone
> using IDNs for spoofing purposes,

This is absolutely wrong. The issue has been discussed at length. See
the "Security Considerations" of RFC 3490.

> and now that one or two well-publicized spoofing examples have
> appeared,

Pure marketing, BTW. Nothing new in the recent announces, just
sensation papers.

> Is there even enough solid information to begin writing anything, or
> just a general feeling that Something Needs To Be Done?

The Powers Above require that Something should be done (they will
forget about it in a few weeks) but, technically speaking, there is
indeed nothing now.