Re: [opensuse] Internet domain names with international characters (idn)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The Friday 2007-10-05 at 13:13 +0100, Dave Howorth wrote:

On Thu, 2007-10-04 at 01:06 +0200, Carlos E. R. wrote:
Another curiosity is that the whois for .com do support IDN, but others,
like .cl or .es, do not - and they should, as they are interested parties
in this.

Also interesting and perhaps relevant is that cl is listed as a good guy
on: <http://www.mozilla.org/projects/security/tld-idn-policy-list.html>

I had no idea of this.


Sadly com is not. Neither is es

So if I read the implications correctly, you may be able to register
spoof domains on .com and the whois will spoof you as well. You can't
register spoof domains on .cl and the whois is completely unambiguous
but a pain unless/until they upgrade their whois. Not sure what the
position of .es is?

They started registering IDN domains only two days ago, but that's about all I know. The charset they allow is published:

'á', 'à', 'é', 'è', 'í', 'ì', 'ó', 'ò', 'ú', 'ü', 'ñ', 'Ç' and 'l·l'

but I don't know if there is danger in them or not, nor what is the policy.



- -- Cheers,
Carlos E. R.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFHBrH2tTMYHG2NR9URAl5wAKCN3PnU4zN6Oxahgm94gHOotFGIrgCdEfue
ldQU9qTycI8L94ERP0MvUmQ=
=kLgu
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: [opensuse] Internet domain names with international characters (idn)
    ... Carlos E. R. wrote: ... So if I read the implications correctly, you may be able to register ... spoof domains on .com and the whois will spoof you as well. ...
    (SuSE)
  • Re: [opensuse] Internet domain names with international characters (idn)
    ... spoof domains on .com and the whois will spoof you as well. ... register spoof domains on .cl and the whois is completely unambiguous ... For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx ...
    (SuSE)
  • RE: Where is the Security!!!
    ... Your whois query returns all the entries in the database which include ... Most large companies attract detractors who register xxxx-sucks.com type ... Hey, if they want to blow $25 on a domain name, who cares? ... Microsoft or with Who LOVE MICROSOFT....and why only microsoft :-( ...
    (Security-Basics)
  • Re: expiring domain names advice?
    ... Apparently the domain didn't expire on July 17 ... Expiration date 17 July 2007? ... WHOIS seems to overlap. ... I don't believe anyone else would be able to register it, ...
    (alt.internet.search-engines)
  • Re: Detect wesite owner, how?
    ... I want from my website I'm creating being able to detect the owner of ... other websites, So I'm wondering how to perform such a check. ... Users can register on my website and claim that they own certain ... You could also run a domain registry whois query and check the email ...
    (microsoft.public.dotnet.framework.aspnet)