[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [idn] Re: Legacy charset conversion in draft-ietf-idn-idna-08.txt




> The basic attack: Alice runs on host that uses Latin-1 for
> input/output and enters www.µbank.com (where µ is 8859-1 0xB5).  The
> domain is registered using U+00B5, but Alice's application transcode
> the string using U+03BC.  Either Alice can't connect (if the other
> domain doesn't exist) or she ends up talking to someone else (if the
> other domain does exist).

I'm sorry, but your example doesn't work. In nameprep, when doing Unicode 
Normalization, U+00B5 is mapped to U+03BC. So these will be the same 
domain name, and have the same ACE label.

roozbeh