Thanks! Although my linking to the old version was an accident, it's interesting that a) the old version explicitly says it's “for IDN”, and b) the characters

Thanks! Although my linking to the old version was an accident, it's interesting that a) the old version explicitly says it's “for IDN”, and b) the characters used in this particular attack were already listed then. Here's a report of this attack from 2002, emphasising that it really isn't a new problem. Why on earth haven't the domain registrars acted? Or if they have, what went wrong in this case? [1] http://www.cs.technion.ac.il/~gabr/papers/homograph.html http://www.cs.technion.ac.il/~gabr/papers/homograph.html