[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Ltru] [psg.com #967] address homograph issues insecurityconsiderations



> From: ltru-bounces at lists.ietf.org [mailto:ltru-bounces at lists.ietf.org]
On
> Behalf Of Addison Phillips


> Close to rejecting it? It's utterly confused. Langtags have nothing to
do
> with IDN (which uses xn-- for something special) and there are no
> homographs in the ASCII range allowed for language tags (unless you
count
> L vs. 1 and o vs. 0). But these are restricted in use (nearly all the
> defined tags use alpha codes) and would have no measurable security
impact.

Quite so. To compare with the security issues of IDN is more than a
stretch.

On the other hand, can we be certain that someone someday might not find
a way to turn a confusion between e.g. 1996 and l996 in some future
client protocol? 

I'm not saying I'm convinced it's something we need to do. Just raising
possibilities.



Peter Constable

_______________________________________________
Ltru mailing list
Ltru at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/ltru




Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.