Re: [idn] Re: [idn-nameprep] Arabic hyphen-like glyph

[John C Klensin <klensin@research.att.com>]

--On Thursday, 26 July, 2001 19:50 +0900 Soobok Lee
<lsb@postel.co.kr> wrote:

> Using hyphen in place of NWNJ in Arabic multi-word domains
> may cause confusion because arabic script already contains
> hyphen-like letters already. that's the point.
> That's not related directly to nameprep, but to IDN security.
> 
> I hope those small ratholes may not become security holes in
> IDN.

It seems to me, regardless of other IDN work and its outcomes,
that an analysis that identifies these "small ratholes" in
matching and character identification and their security
implications would be a very useful contribution.  Its text might
ultimately become part of something else, or it might be
published separately.  And I would hope that the WG Co-chairs
would not impose an "interest level" requirement on drafts or
components of such an analysis, treating it instead as part of
the general requirement on the WG to produce a "security
considerations" analysis of any proposed standards-track
materials it produces.

    john