[Pkg-kde-bugs-fwd] [Bug 98788] Possible solution to IDN domain spoofing/phising

George Staikos 98788@bugs.kde.org
19 Feb 2005 16:25:51 -0000


------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
         
http://bugs.kde.org/show_bug.cgi?id=98788         




------- Additional Comments From staikos kde org  2005-02-19 17:25 -------
On Saturday 19 February 2005 10:10, Thiago Macieira wrote:
> Ok, new idea: don't disable the code in any way.
>
> Make Konqueror show an icon "IDN" in the status bar when the ACE (ASCII
> Compatible Encoding) form doesn't match the Unicode form, and show *both*
> forms in the Location bar.
>
> When you browse to the problematic site, you would see:
> http://www.pаypal.com/  (www.xn--pypal-4ve.com)
>
> This would also happen:
> http://www.オンライン.or.jp (www.xn--eckl3qmbc.or.jp)
>
> It wouldn't solve the problem of someone sending email to IDN'ed domains,
> unless KMail did something similar.

    Right, every application would need this, including ones we didn't 
write...