Jan Schejbal wrote:
.de is in the IDN whitelist, so international domain names from this TLD will show up in their "human-readable" form (not punycode). However, the .de registry DENIC seems to allow certain characters that might be mistaken for others. I am sure they are not the only one. Their policy [1] does not state anything about blocking similar domain names. For example, one of the characters allowed in the policy is n (n with a small dash below it).
It sounds like it shouldn't be in the IDN whitelist until they fix the above issues. The policy is that registrars can be in the IDN whitelist if they prevent things like that, no?
-Boris _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
