Bug 275493

Summary:

Domain names with special characters (IDNs) are displayed in punycode in the passkey mediation UI.

Product:

WebKit

Reporter:

Rodrigue de Guerre <appleid.designo>

Component:

WebKit Misc.

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

bfulgham, pascoe, simon.fraser, webkit-bug-importer, wilander, zalan

Priority:

Keywords:

InRadar

Version:

Safari 17

Hardware:

All

OS:

Unspecified

Attachments:

Description	Flags
passkey mediation UI with an IDN displayed in punycode	none

Rodrigue de Guerre

Reported 2024-06-14 09:46:04 PDT

Created attachment 471677 [details] passkey mediation UI with an IDN displayed in punycode As mentioned in issue #2087 (https://github.com/w3c/webauthn/issues/2087), domain names with special characters (IDNs) are displayed in punycode instead of unicode in the passkey mediation UI. This makes it confusing for users and can lead to major trust issues of the domain. It would be good if the domain name was converted to punycode but still displayed in unicode in the conditional UI. Overall I think the domain should be converted to punycode but always displayed in unicode for the users.

Attachments
passkey mediation UI with an IDN displayed in punycode (88.55 KB, image/png) 2024-06-14 09:46 PDT, Rodrigue de Guerre	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2024-06-21 09:47:15 PDT

<rdar://problem/130282810>

Rodrigue de Guerre

Comment 2 2024-10-09 08:21:47 PDT

This has apparently been fixed in the latest version of Safari. Thank you!

Note You need to log in before you can comment on or make changes to this bug.