Re: [idn] Re: nameprep, IDN spoofing and the registries

[William Tan <wil@dready.org>]

Jefsey,

Which ccTLDs do you intend to propose this experiment? If you don't mind 
revealing...
Have these ccTLDs rolled out IDN implementation? If so, do they 
currently employ a character table of sorts?\

> 1. could someone point a "C" source code to carry what has to be 
> carried to filter out the dangerous names? Please help: I have no 
> resource on this.


I'm not sure what exactly you need. If you have the tables it should be 
fairly trivial to write some functions in C to filter names. Make sure 
your inputs are properly normalized and just compare the 
to-be-registered name against your blacklist, reject the name on any match.

> 2. could someone list all the Unicode codes to blacklist that way?


If character tables are used, they effectively serve as a whitelist. If 
you wish to disallow any character from being registered, just make sure 
that it's not on the whitelist.

> 3. could someone point a Perl code to use to enter a IDN and to get it 
> properly punycoded, which could use such a list.

Try  Net::LibIDN (http://spaceship.berlios.de/index.php?page=idn.php) 
which is a Perl binding for GNU Libidn. It seems to have some support 
for character inclusion list, not sure about blacklists though.

Regards,
wil.