Bug 55315

Summary: Implement new IDNA2008 standards
Product: WebKit Reporter: Michael <michaelmm>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED CONFIGURATION CHANGED    
Severity: Critical CC: ahmad.saleem792, annevk, ap
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
URL: http://www.straße.de

Description Michael 2011-02-27 00:57:50 PST
Hello,

The .de NIC (denic.de) will implement IDNA2008 from 2010-11-16 onwards,
especially allowing for ß (\u00df) in domain names. Hence, the automatic
translation of ß to ss may result in looking up the wrong domain name, allowing
for spoofing attacks.
(DENIC will run a sunrise period (2010-10-26 to 2010-11-15) during which
holders of domains with ss will be allowed top register the respective ß domain
in advance.)

http://www.denic.de/en/domains/internationalized-domain-names/sharp-s.html

ß and ss are not exchangable in German. ss instead of ß is just a makeshift. Germans expect ß to usually just work if
umlauts work (which already do for a while).


Regards

Michael
Comment 1 Ahmad Saleem 2023-06-03 05:02:35 PDT
Sure, it would have been done.
Comment 2 Anne van Kesteren 2023-06-03 05:51:45 PDT
Yeah, this has been fixed for a while. There will likely be some further tweaks around Bidi, but that shouldn't impact .de NIC and is best tracked in a new bug once Unicode makes the relevant changes in UTS46 and the URL Standard adopts them.