On Wednesday, November 2, 2016 6:30:32 PM CET Jan Ehrhardt wrote: > Daniel Stenberg in gmane.comp.web.curl.library (Wed, 2 Nov 2016 10:30:45 > > +0100 (CET)): > >On Wed, 2 Nov 2016, Simon Josefsson wrote: > >>> Based on this, I suppose my recommendation is that people simply switch > >>> off > >>> IDN support in curl builds until further notice to stay safe. The old > >>> way > >>> was open for trickery and the new way is incomplete. > >> > >> What trickery are you referring to? > > > >IDNA 2003 makes us use the wrong host for .de host names using ß: > > https://curl.haxx.se/docs/adv_20161102K.html > > Any idea what libicu is doing? It seems to have both IDNA2003 and > IDNA2008 support.
libicu has UTS #46 - it does it right. Feel free to use the code from libpsl (https://github.com/rockdaboot/libpsl/ blob/master/src/psl.c - i am the author), which has libicu code with UTF-8 lowercasing and IDNA conversion. Regards, Tim
signature.asc
Description: This is a digitally signed message part.
------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html
