[issue17305] IDNA2008 encoding is missing

[Eric Case]

Change by Eric Case :


--
nosy: +case

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Andrei Kulakov]

Andrei Kulakov  added the comment:

Maybe deprecate idna so that users are strongly prompted to consider the pypi 
idna?

--
nosy: +andrei.avk

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Łukasz Langa]

Łukasz Langa  added the comment:


New changeset 2760a6711b0f510afbd09b19949bee786e098af9 by Miss Islington (bot) 
in branch '3.8':
bpo-17305: Link to the third-party idna package. (GH-25208) (#25211)
https://github.com/python/cpython/commit/2760a6711b0f510afbd09b19949bee786e098af9


--
nosy: +lukasz.langa

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[miss-islington]

miss-islington  added the comment:


New changeset c7ccb0ff61e443633d0c54cb18b5633a8e95b30c by Miss Islington (bot) 
in branch '3.9':
bpo-17305: Link to the third-party idna package. (GH-25208)
https://github.com/python/cpython/commit/c7ccb0ff61e443633d0c54cb18b5633a8e95b30c


--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[miss-islington]

Change by miss-islington :


--
pull_requests: +23950
pull_request: https://github.com/python/cpython/pull/25211

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[miss-islington]

Change by miss-islington :


--
pull_requests: +23949
pull_request: https://github.com/python/cpython/pull/25210

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[miss-islington]

miss-islington  added the comment:


New changeset 1d023e374cf96d143b065242131ddc9b889f9a1e by Gregory P. Smith in 
branch 'master':
bpo-17305: Link to the third-party idna package. (GH-25208)
https://github.com/python/cpython/commit/1d023e374cf96d143b065242131ddc9b889f9a1e


--
nosy: +miss-islington

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Gregory P. Smith]

Gregory P. Smith  added the comment:

My PR merely adds a note to the docs linking to idna on pypi.  Don't get 
excited, it doesn't implement anything.  :P

re "Once Python has a working idna2008 encoder, we need to address integration 
into socket, ssl, http, and asyncio module."

... doing that _could_ be the same can of worms the browsers all had to go 
through?  We'd need to decide which behavior we wanted; pure? or matching what 
browsers do?  I suspect that is equivalent to the pypi idna 
https://github.com/kjd/idna 's uts46=True + transitional=True mode [*] but 
anyone doing this work would need to figure that out for sure if we wanted to 
default to behaving like browsers with the transitional compatibility mode.

That there is a need for a couple options on top of idna2008 as an encoding 
suggests it may not be a great fit for the Python codecs encodings system as 
those use a single string name.  We'd need to permute the useful possible 
combos of flag behavior in the names.  idna2003, idna2008, idna2008uts46, 
idna2008uts46transitional, and other combos of those if alternate combinations 
are deemed relevant.

I worry that a browser-transitional-behavior-matching situation may change over 
time as TLDs decide when to change their policies.  Is that an irrational fear? 
 Browsers are well equipped to deal with this as they've got frequent updates.  
A PyPI package could as well.

[*] Browser history:

fwiw people wondering _why_ browsers like Chrome and Firefox don't "just 
blindly use idna2008 for everything" should go read the backwards compatibility 
transitional rationale and security concerns in 
https://bugs.chromium.org/p/chromium/issues/detail?id=61328
and https://bugzilla.mozilla.org/show_bug.cgi?id=479520

(caution: be ready to filter out the random internet whiners from those threads)

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Gregory P. Smith]

Change by Gregory P. Smith :


--
keywords: +patch
nosy: +gregory.p.smith
nosy_count: 15.0 -> 16.0
pull_requests: +23948
stage: needs patch -> patch review
pull_request: https://github.com/python/cpython/pull/25208

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Christian Heimes]

Christian Heimes  added the comment:

The issue has been waiting for contributions for 8 years now. So far nobody has 
shown an interested to address the problem and contribute an IDNA 2008 codec to 
Python's standard library.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Derek Wilson]

Derek Wilson  added the comment:

why the downgrade from security to enhancement and critical to high?

this is a significant issue that can impact everything from phishing to TLS 
certificate domain validation and SNI.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Christian Heimes]

Change by Christian Heimes :


--
priority: critical -> high
type: security -> enhancement
versions: +Python 3.10 -Python 3.8, Python 3.9

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Christian Heimes]

Christian Heimes  added the comment:

BPO #40845 is another case of IDNA 2003 / 2008 bug.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Christian Heimes]

Christian Heimes  added the comment:

There is no consensus yet. Besides https://pypi.org/project/idna/ we could also 
consider to wrap libidn2 and ship it. Both PyPI idna and libidn2 have potential 
licensing issues. I don't like the idea to reinvent the wheel and implement our 
own idna2008 codec. It's not a trivial task.

Once Python has a working idna2008 encoder, we need to address integration into 
socket, ssl, http, and asyncio module.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Andrew Svetlov]

Andrew Svetlov  added the comment:

There is no consensus yet, IMHO.
There is a lack of resources for the issue.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Ashwin Ramaswami]

Ashwin Ramaswami  added the comment:

So is the consensus that the best way to do this is to move the "idna" library 
to stdlib, or implement it from scratch?

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Christian Heimes]

Christian Heimes  added the comment:

You have to ask the Chrome team.

--
versions: +Python 3.8

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Ashwin Ramaswami]

Ashwin Ramaswami  added the comment:

Why would chrome still be using IDNA 2003 to link http://straße.de to 
http://strasse.de?

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Ashwin Ramaswami]

Change by Ashwin Ramaswami :


--
nosy: +epicfaace
versions: +Python 3.9 -Python 3.8

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Stéphane Wirtel]

Change by Stéphane Wirtel :


--
nosy:  -matrixise

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Johannes Frank]

Change by Johannes Frank :


--
nosy: +matrixise

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue17305] IDNA2008 encoding is missing

[Andrew Svetlov]

Change by Andrew Svetlov :


--
title: IDNA2008 encoding missing -> IDNA2008 encoding is missing

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com