4 ms·
Random ideas to solve this: Get phishing sites on Chrome/Firefox's red-flag lists (presumably this already happens?) Show a country flag in the URL bar based
by mattbee 10y ago
Random ideas to solve this:
Get phishing sites on Chrome/Firefox's red-flag lists (presumably this already happens?)
Show a country flag in the URL bar based on the language/alphabet of the URL
Change the URL bar colour for punycode domains
Show a big banner the first time you visit a site that you've not visited before.
Have the browser detect and warn about possible homographs based on history.
Having said all that, is this really such a large problem that no browser has needed to solve it? I suspect the centralised malware lists are good enough, but scary demo URLs will never get onto one.
- Freak_NL 10y ago> Show a country flag in the URL bar based on the language/alphabet of the URL Languages are often spoken in more than one country. Should amazon.com fly the Union Jack or wien.gv.at a German flag? I don't think a Russian flag for Cyrillic would be appreciated in Ukraine either. Scripts (e.g., Latin, Cyrillic, Hangul) could get their own signifier or symbol, but that does mean disallowing (or discouraging) mixed script domains — which may not be a bad idea. Perhaps certain scripts should be limited to certain CCTLDs and generic TLDs so that the demo URL would be disallowed in .com, but permissable in .cyrl, which in turn disallows any other scripts (including Latin). It might solve the phishing angle. It would also solve complex cases such as Japanese (which would require Chinese characters, katakana, hiragana, and some Latin characters; perhaps the full-width set?). Perhaps put those under .日本 and allow only Latin characters under .jp. Technically feasible, though politically untenable.