Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Sunday March 11 2018, @10:39AM   Printer-friendly
from the söylêntnéws.org dept.

Brian Krebs writes on how browsers choose to display IDN. The issue here is of course spoofing valid URLs with visually similar letters. You probably would notice the lame attempt in the department line but some of the international characters are very similar or indeed identical. Depending on your personal preferences it might be a good idea to use punycode instead. Could save you a headache later.

https://krebsonsecurity.com/2018/03/look-alike-domains-and-visual-confusion/

Here are some of the applicable RFCs:

  • RFC 3490 - Internationalizing Domain Names in Applications (IDNA)
  • RFC 3491 - Nameprep: A Stringprep Profile for Internationalized Domain Names (IDN)
  • RFC 3492 - Punycode: A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)
  • RFC 3986 - Uniform Resource Identifier (URI): Generic Syntax
  • RFC 4690 - Review and Recommendations for Internationalized Domain Names (IDNs)
  • RFC 5890 - Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
  • RFC 5891 - Internationalized Domain Names in Applications (IDNA): Protocol
  • RFC 5892 - The Unicode Code Points and Internationalized Domain Names for Applications (IDNA)
  • RFC 5893 - Right-to-Left Scripts for Internationalized Domain Names for Applications (IDNA)
  • RFC 5894 - Internationalized Domain Names for Applications (IDNA): Background, Explanation, and Rationale

Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by maxwell demon on Sunday March 11 2018, @12:16PM (1 child)

    by maxwell demon (1608) on Sunday March 11 2018, @12:16PM (#650897) Journal

    Well, the biggest problem with inventing your own internet is getting other people build and to use it. I think I'll finish my work on a time machine first. ;-)

    --
    The Tao of math: The numbers you can count are not the real numbers.
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 3, Informative) by requerdanos on Monday March 12 2018, @12:32AM

    by requerdanos (5997) Subscriber Badge on Monday March 12 2018, @12:32AM (#651131) Journal

    the biggest problem with inventing your own internet is getting other people build and to use it.

    Use it, sure; adoption would be a problem until a critical mass was reached.

    But build it? Most devices capable of operating on an internetwork have the hardware (ethernet, wifi, etc.) and software (networking stack that can perform tcp/ip) built right in or easily available.

    Instead of connecting your devices to the Internet, connect them instead to your internet. The infrastructure (the links between nodes, not the routing, dns, etc.) is going to be largely the same; besides leased lines between locations, you could even tunnel links across another network (such as the Internet).

    I would hope that a person starting his or her own internetwork would start with something like ipv6 (and not, not, not ipv4) but I expect the opposite.