3 ms·
Why worry about the dictionaries? No legitimate user will accidentally enter a Greek Alpha rather than an A, for example. If a malicious user does this it won'
by buckminster 6y ago
Why worry about the dictionaries? No legitimate user will accidentally enter a Greek Alpha rather than an A, for example. If a malicious user does this it won't resolve anyway because the domain is banned by the rules and can't be registered.
- ricardo81 6y agoYeah, perhaps less important for LinkedIn but more pertinent for other parties like domain registrars and TLS cert issuers- apparently the 'rules' ala the registry's DNS is an evolving thing. https://www.theregister.com/2020/03/04/homograph_attacks_still_happening/ https://www.theregister.com/2020/03/04/homograph_attacks_sti... Ignoring the specific characters without a local frame of reference would require at least a DNS lookup.
- tinus_hn 6y agoThis kind of tricks is used by sending mail to users with legitimate looking links, which can be used for phishing.