Re: [idn] spoofing by combining diacritical marks

[Martin Duerst <duerst@w3.org>]

At 09:19 01/08/30 +0900, Soobok Lee wrote:
>More self-comment:
>
>   Current unicode standard have _no_  normalization rules on
>     repeated <acute>s ( and other diacritical marks)  to prevent them from
>     looking differently according to their positions in unicode strings.

Sorry, I don't understand that. Two acute accents after a
character are supposed to be displayed as two acute accents.
There is no need for normalization, because there is only
one way to have a sequence of two acute accents.


>   The second <Acute> in the <acute><Acute> does not display in some
>   cases.

That's a rendering problem. The implementation you use should needs
to be fixed.

Regards,   Martin.

>   This problem is somewhat out of IDN WG scope and should be reviewed
>   by relevant  standard organizations.
>
>   Zone masters should be aware of this and filter out  spoofing domains..
>
>  Soobok Lee