Re: [idn] Mac OS X Safari and IDN spoofing

"JFC (Jefsey) Morfin" <jefsey@jefsey.com> Fri, 25 March 2005 16:39 UTC

Received: from psg.com (mailnull@psg.com [147.28.0.62]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA15905 for <idn-archive@lists.ietf.org>; Fri, 25 Mar 2005 11:39:17 -0500 (EST)
Received: from majordom by psg.com with local (Exim 4.44 (FreeBSD)) id 1DErkN-000CPn-J8 for idn-data@psg.com; Fri, 25 Mar 2005 16:33:19 +0000
Received: from [63.247.76.194] (helo=montage.altserver.com) by psg.com with esmtps (TLSv1:DES-CBC3-SHA:168) (Exim 4.44 (FreeBSD)) id 1DErkL-000CPG-Io for idn@ops.ietf.org; Fri, 25 Mar 2005 16:33:17 +0000
Received: from lns-p19-1-idf-82-251-137-168.adsl.proxad.net ([82.251.137.168] helo=jfc.afrac.org) by montage.altserver.com with esmtpa (Exim 4.44) id 1DErFJ-0003Bs-Bg; Fri, 25 Mar 2005 08:01:13 -0800
Message-Id: <6.1.2.0.2.20050325164709.03f3e010@mail.jefsey.com>
X-Sender: jefsey+jefsey.com@mail.jefsey.com
X-Mailer: QUALCOMM Windows Eudora Version 6.1.2.0
Date: Fri, 25 Mar 2005 17:01:10 +0100
To: Gervase Markham <gerv@mozilla.org>, idn@ops.ietf.org
From: "JFC (Jefsey) Morfin" <jefsey@jefsey.com>
Subject: Re: [idn] Mac OS X Safari and IDN spoofing
In-Reply-To: <42442A07.2030003@mozilla.org>
References: <p06210212be663c22ba1c@[10.20.30.249]> <4240917F.30801@mozilla.org> <9271f2a6d20072ae7e9f1cf9e74cce45@seng.cc> <42442A07.2030003@mozilla.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - montage.altserver.com
X-AntiAbuse: Original Domain - ops.ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]
X-AntiAbuse: Sender Address Domain - jefsey.com
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on psg.com
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.0.1
Sender: owner-idn@ops.ietf.org
Precedence: bulk

At 16:11 25/03/2005, Gervase Markham wrote:
>James Seng wrote:
>>i thought the ideas they have was pretty interesting
>>choose the scripts you use most often that you like to display normally 
>>but otherwise, will display in punycode.
>
>What sort of effect do you think it will have on IDN acceptance and use if 
>companies using IDN domains know that their domain name will display as 
>gobbledygook in an unknown percentage of their customer's browsers?

They will not if they are "babel names", ie names registered for their 
punycode display, such as "xn--cocacola.com".

I made a list in using Simon Josefsson oline tool and a small funycode 
program for Adam to test them. What he did. I do not remember the names I 
gave: I tried a few like xn--adam-costello.com, xn--vint-cerf.ibm, 
xn--gw-bush.com, etc. Many worked. If I am right the most brillant was 
xn--ibm.com which called for a single character IDN. The main issue is that 
if you TM the Unicode name there is nothing to be done.
jfc