Bug 55315
| Summary: | Implement new IDNA2008 standards | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Michael <michaelmm> |
| Component: | New Bugs | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED CONFIGURATION CHANGED | ||
| Severity: | Critical | CC: | ahmad.saleem792, annevk, ap |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | All | ||
| OS: | All | ||
| URL: | http://www.straße.de | ||
Michael
Hello,
The .de NIC (denic.de) will implement IDNA2008 from 2010-11-16 onwards,
especially allowing for ß (\u00df) in domain names. Hence, the automatic
translation of ß to ss may result in looking up the wrong domain name, allowing
for spoofing attacks.
(DENIC will run a sunrise period (2010-10-26 to 2010-11-15) during which
holders of domains with ss will be allowed top register the respective ß domain
in advance.)
http://www.denic.de/en/domains/internationalized-domain-names/sharp-s.html
ß and ss are not exchangable in German. ss instead of ß is just a makeshift. Germans expect ß to usually just work if
umlauts work (which already do for a while).
Regards
Michael
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Ahmad Saleem
Sure, it would have been done.
Anne van Kesteren
Yeah, this has been fixed for a while. There will likely be some further tweaks around Bidi, but that shouldn't impact .de NIC and is best tracked in a new bug once Unicode makes the relevant changes in UTS46 and the URL Standard adopts them.