3 ms·
your password manager's url comparison? Better than manual url comparision! A surprising number of humans think things like www.goodcompany.evil.com are urls
by cbr 10y ago
your password manager's url comparison?
Better than manual url comparision! A surprising number of humans think things like www.goodcompany.evil.com are urls for "Good Company", and anyone can screw up and make mistakes checking urls (www.goodcomany.com).
- ksenzee 10y agoAdd Unicode and it gets worse. I don't trust my eyes to differentiate between Cyrillic а and Latin a. https://en.wikipedia.org/wiki/IDN_homograph_attack https://en.wikipedia.org/wiki/IDN_homograph_attack
- cbr 10y agoBrowsers only display unicode in domain names if the TLD has restrictions on character sets that prevent homograph attacks. See https://en.wikipedia.org/wiki/IDN_homograph_attack#Defending_against_the_attack https://en.wikipedia.org/wiki/IDN_homograph_attack#Defending...