I came to this list after hearing about the widely publicized IDN spoofing attack on Firefox. [...]
So, what happened?
Yee, what you see as a list is primarily a newsgroup 'netscape.public.mozilla.security' on which it's easy to get all the old messages, and it would be very useful that you read all those related to this problem.
I'm sure you can bring useful new ideas, but your questions find many answers in those messages.
Read also the messages about it on the "fake URLs 'r us.." thread on the netscape.public.mozilla.crypto group :
http://groups-beta.google.com/group/netscape.public.mozilla.crypto/browse_thread/thread/78c70cd8db419d55/289e4b1606a657fb
See also what Gervase Markham concluded from all that : "A Plan For Scams" http://weblogs.mozillazine.org/gerv/archives/007569.html
"New Short-Term Patch For IDN-based Spoofing" http://weblogs.mozillazine.org/gerv/archives/007586.html The links Gervase refers too from that message are also useful. _______________________________________________ Mozilla-security mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-security
