6 ms·
No, https://en.wikipedia.org/wiki/Domain_name#Technical_requirements_and_process https://en.wikipedia.org/wiki/Domain_name#Technical_requirem... (last paragra
by thousande 11y ago
No, https://en.wikipedia.org/wiki/Domain_name#Technical_requirements_and_process https://en.wikipedia.org/wiki/Domain_name#Technical_requirem...
(last paragraph)
- alister 11y agoNo, you're mistaken. It is actually a very big problem. Earlier on the same page you linked to, it explain that "ICANN approved the Internationalized domain name system, which maps Unicode strings used in application user interfaces"[1]. As a concrete example, the following are fake links to Wikipedia (and entirely equivalent): http://xn--wkd-8cdx9d7hbd.org http://xn--wkd-8cdx9d7hbd.org (FAKE, same as below) http://www.wіkіреdіа.org http://www.wіkіреdіа.org (FAKE, same as above) It is true that network protocols encode these internationalized domain names in a subset of ASCII, but the user sees Unicode in his browser address bar or email. There is no restriction on how applications (like browsers) display domain names[2]; they can use Unicode if they want. This lead to all sorts of devious attacks[3]. [1] https://en.wikipedia.org/wiki/Domain_name#Internationalized_domain_names https://en.wikipedia.org/wiki/Domain_name#Internationalized_... [2] https://en.wikipedia.org/wiki/Internationalized_domain_name#Internationalizing_Domain_Names_in_Applications https://en.wikipedia.org/wiki/Internationalized_domain_name#... [3] https://en.wikipedia.org/wiki/IDN_homograph_attack https://en.wikipedia.org/wiki/IDN_homograph_attack