Close to rejecting it? It's utterly confused. Langtags have nothing to do with IDN (which uses xn-- for something special) and there are no homographs in the ASCII range allowed for language tags (unless you count L vs. 1 and o vs. 0). But these are restricted in use (nearly all the defined tags use alpha codes) and would have no measurable security impact. Addison Addison P. Phillips Globalization Architect, Quest Software Chair, W3C Internationalization Core Working Group Internationalization is not a feature. It is an architecture. > -----Original Message----- > From: ltru-bounces at lists.ietf.org [mailto:ltru-bounces at lists.ietf.org] On > Behalf Of Randy Presuhn > Sent: 2005?5?11? 23:43 > To: LTRU Working Group > Subject: [Ltru] [psg.com #967] address homograph issues in > securityconsiderations > > Hi - > > > Comment > > http://www.ietf.org/mail-archive/web/ltru/current/msg00540.html > > reads: > > "39. 4. An important security consideration is homographs. It is > > certainly possible to include part of text in a foreign language which > > look printed as in another language or having a different meaning or > > printing (phishing). Concerns are also the double "-" which is > > specifically used by the IANA code "xn"." > > > > language issue, rather than tagging, > > see http://www.ietf.org/mail-archive/web/ltru/current/msg00628.html > > I think we're close to rejecting this one. > > Randy, ltru co-chair > > Technical comment: > Perhaps this one might be accomodated by including an explicit statement > about how the repertoire for creating language tags makes homographs a > non-issue (at least in a well-designed font) for the tags themselves. > > > > > _______________________________________________ > Ltru mailing list > Ltru at lists.ietf.org > https://www1.ietf.org/mailman/listinfo/ltru _______________________________________________ Ltru mailing list Ltru at lists.ietf.org https://www1.ietf.org/mailman/listinfo/ltru
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.