Re: [idn] quick & dirty (but not too dirty) homograph defense

[William Tan <wil@dready.org>]

> Yes, and I supposed they should be added to the blacklist as they are
> discovered, but I think getting the Verisign TLDs (.com and .net) into
> the blacklist will accomplish most of the benefit to be had from this
> approach.  It's not like the phishers can move all their attacks to .tm
> after they get shut out of .com and .net, because there aren't nearly as
> many targets in .tm.  How many users have sensitive trust relationships
> with sites in .tm (and .nu, etc)?
>  
True.

If Verisign drops support for languages for which they have no tables, 
and deal with the potential phishing attempts already in the registry, 
their TLD can then be removed from the blacklist. Likewise for whoever 
gets .net next.

wil.