Re: [qutebrowser] IDN spoofing

2017-04-23 Thread Florian Bruhin
Hey, On Thu, Apr 20, 2017 at 09:51:04PM +0200, Florian Bruhin wrote: > My current stance on this, by the way, is showing the Punycode > representation in addition to the "normal" one for any non-ascii URL: > https://github.com/qutebrowser/qutebrowser/issues/2547#issuecomment-295877408 This is

Re: [qutebrowser] IDN spoofing

2017-04-19 Thread Martin Tournoij
On Wed, Apr 19, 2017, at 16:08, John Lane wrote: > Interesting article[1] on the register today about internationalised > domain name (IDN) spoofing using Punycode[2]. > > I think it's quite alarming that many browsers show you what looks like > apple.com which in reality is something entirely