3 ms·
Isn't this exploiting the same kind of Unicode ambiguity that allowed phishing sites to impersonate trusted domains by substituting certain latin characters wit
by mrgriscom 12y ago
Isn't this exploiting the same kind of Unicode ambiguity that allowed phishing sites to impersonate trusted domains by substituting certain latin characters with identical-looking cyrillic equivalents? I would expect this capability to last long in the wild.
- konstruktors 12y agoInterestingly, none of those "zero-width" characters are allowed in IDN domain names http://unicode.org/faq/idn.html#22 http://unicode.org/faq/idn.html#22
- _jomo 12y agoThese domains are displayed in their punycode notation, at least in Firefox, so that doesn't work anymore.
- mrgriscom 12y agowould->wouldn't