Internationalized Domain Name (idn)

Harald | 14 Jul 2005 11:44

Re:

+----------------------------------------------------+

Panda GateDefender has detected malicious content (Virus) in the following file: [New_MP3_Player.c
pl]
W32/Bagle.AH.worm

The file has been deleted to protect the network.
07/14/2005 08:38 +0100

www.pandasoftware.com

+----------------------------------------------------+

>Screen and Music

headers

Gervase Markham | 22 Jul 2005 18:12

IDN Implementation Status Update

This is a message to tell interested parties the current status of the 
mozilla.org changes to Firefox regarding IDN.

We have implemented a TLD whitelist system, which currently contains 21 
TLDs for which we correctly display IDN domain names in the UI.
http://www.mozilla.org/projects/security/tld-idn-policy-list.html
Any IDN domain name in a non-whitelisted TLD displays as punycode. This 
is a security feature and so there is no user interface for adding or 
removing TLDs.

Any registry which wishes to be added to the whitelist should follow the 
instructions on that page. In terms of what constitutes a homograph, we 
are being guided by the Unicode Consortium's confusables list:
http://www.unicode.org/draft/reports/tr36/data/confusables.txt
and by common sense. Our policy in this area is still somewhat in flux - 
in particular, we are not yet sure whether we should require that 
registries to consider two characters which differ only in accent 
(sometimes by the shade of a single pixel at normal font sizes) as 
homographic. In the mean time, we strongly advise that registries do this.

We have implemented a character blacklist, which will soon contain 
'DIVISION SLASH' (U+2215) and 'FRACTION SLASH' (U+2044). After that, we 
may extend it to forbid more characters which may be used to spoof URL 
punctuation.
https://bugzilla.mozilla.org/show_bug.cgi?id=301694
This is not meant to prejudice the outcome of the current IAB-IDN 
discussions on potentially reducing the number of characters permitted 
in IDN, but we feel the danger posed by the use of such characters in 
3rd and 4th level domains is great enough to require an immediate ban. 
Any domain name which contains one or more of these characters displays

(Continue reading)

Mon	Tue	Wed	Thu	Fri	Sat	Sun

				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31

1	March 2008
1	February 2008
1	February 2006
1	September 2005
2	July 2005
6	May 2005
4	April 2005
88	March 2005
271	February 2005
1	November 2004
8	September 2004
23	August 2004
6	July 2004
4	June 2004
2	May 2004
1	April 2004
3	March 2004
2	February 2004
19	January 2004
1	December 2003
4	November 2003
60	October 2003
1	September 2003
4	August 2003
2	July 2003
2	June 2003
13	May 2003
27	April 2003
98	March 2003
16	February 2003
22	January 2003
31	December 2002
65	November 2002
97	October 2002
207	September 2002
24	August 2002
60	July 2002
211	June 2002
206	May 2002
51	April 2002