Re: [idn] homograph attacks

[Erik van der Poel <erik@vanderpoel.org>]

Hello all,

It seems to me that a registry should not allow the registration of an 
IDN domain name under a particular language if that registry does not 
have a table for that language.

When a registry *does* have a table for a particular language, the IDN 
domain name is restricted to the characters that appear in that table.

So, when there is *no* table for a language, then *no* characters should 
be allowed. In other words, no IDN domain names (starting with xn--) 
should be allowed.

Also, it seems to me that registries like COM could "stop the bleeding" 
(for now) by immediately deploying systems that enforce a policy where 
registrations for languages for which they do not have tables are rejected.

After that, they could continue to gather or compile tables.

Regards,

Erik van der Poel

William Tan wrote:
> Pat can correct me if I'm wrong, but my understanding is that VGRS does 
> NOT have a table associated with the German language. So, if you went 
> ahead and register an IDN, and selected the German language, you can 
> pretty much register any label that is permitted by IDNA, including 
> characters that aren't remotely related to German.
>
> Regsards,
> wil.