From: John Burger (john@mitre.org)
Date: Thu Feb 10 2005 - 16:48:38 CST
Frank Yung-Fong Tang wrote:
> Any one have any comment about
> https://bugzilla.mozilla.org/show_bug.cgi?id=279099
Here's a popular press description of the problem
http://www.macworld.com/news/2005/02/08/spoof/index.php
which points to a test for it at Secunia.com. (They registered
paypal.com spelled with a Cyrillic "a".) Ironically, IE doesn't fall
for the spoof, because it apparently doesn't handle IDNs. Of course,
from a user interface perspective, browsers need to do something about
this, but I find it annoying that it's described as a "security flaw".
My browser doesn't warn me about g00g1e.com yet, either.
- John D. Burger
MITRE
This archive was generated by hypermail 2.1.5 : Thu Feb 10 2005 - 16:51:25 CST