On Wed, 2 Nov 2016, Simon Josefsson wrote:
Based on this, I suppose my recommendation is that people simply switch off IDN support in curl builds until further notice to stay safe. The old way was open for trickery and the new way is incomplete.What trickery are you referring to?
IDNA 2003 makes us use the wrong host for .de host names using ß: https://curl.haxx.se/docs/adv_20161102K.html -- / daniel.haxx.se
------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html
