Daniel Stenberg in gmane.comp.web.curl.library (Wed, 2 Nov 2016 10:30:45 +0100 (CET)): >On Wed, 2 Nov 2016, Simon Josefsson wrote: > >>> Based on this, I suppose my recommendation is that people simply switch off >>> IDN support in curl builds until further notice to stay safe. The old way >>> was open for trickery and the new way is incomplete. >> >> What trickery are you referring to? > >IDNA 2003 makes us use the wrong host for .de host names using ß: > > https://curl.haxx.se/docs/adv_20161102K.html
Any idea what libicu is doing? It seems to have both IDNA2003 and IDNA2008 support. -- Jan ------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html
