3 ms·

This actually isn't true. A website like https://www.xn--80ak6aa92e.com/ https://www.xn--80ak6aa92e.com/ won't show up as apple.com. Browsers don't allow Unicod

This actually isn't true. A website like https://www.xn--80ak6aa92e.com/ https://www.xn--80ak6aa92e.com/ won't show up as apple.com. Browsers don't allow Unicode rendering in the URL bar. Maybe IE is affected though. I haven't tested every browser. But it's a known security concern.

fnj 9y ago
Sorry to tell you, does show up as apple.com in my browser. Chrome 52.0.2743.82-1 on Arch x86_64.
- deleted 9y ago
  [deleted]
- mh- 9y ago
  That version of Chrome is over a year old.
- deleted 9y ago
  [deleted]
- deleted 9y ago
  [deleted]
- arthurfm 9y ago
  The IDN vulnerability was fixed by Google in Chrome 58. https://arstechnica.co.uk/information-technology/2017/04/chrome-firefox-and-opera-unicode-phishing/ https://arstechnica.co.uk/information-technology/2017/04/chr... https://bugs.chromium.org/p/chromium/issues/detail?id=683314 https://bugs.chromium.org/p/chromium/issues/detail?id=683314 Why have you got such an old version of Chrome?
  - fnj 9y ago
    Thank you. That gives me a strong reason to update. To answer your question, (1) it's pretty arduous to install Chrome from the AUR, and (2) I am wary of Google removing useful functionality from Chrome.
nl 9y ago
It shows up as www.apple.com on Firefox 54.0.1 (latest, up-to-date) on OSX.
- CrendKing 9y ago
  about:config, set network.standard-url.punycode-host to true
- numerum-bestiae 9y ago
  Just tried - same (54.0.1) FF version on Android DOES show apple.com (Chrome and Yandex do not).
userbinator 9y ago
Disable IDN and you will be safe from those. If you're not going to use non-ASCII domain names, you won't miss much.