[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Ltru] [psg.com #967] address homograph issues in security considerations



Hi -

> From: "Addison Phillips" <addison.phillips at quest.com>
> To: "McDonald, Ira" <imcdonald at sharplabs.com>; "Peter Constable" <petercon at microsoft.com>; "LTRU Working Group" <ltru at ietf.org>
> Sent: Thursday, May 12, 2005 11:42 AM
> Subject: RE: [Ltru] [psg.com #967] address homographissuesinsecurityconsiderations
>

> Text would be *most* helpful.
...

In the interest of reaching closure on this item, as a technical contributor I'll
propose some words that I think will start to address some of Ira's concerns.

1) In section 6 (security considerations) the first paragraph would need to be
modified since there would no longer be just one issue.

2) Add the following paragraph to section 6:

The limited repertoire of characters permitted in language tags provides
few opportunities for homograph confusion.  Whether there are any at
all depends upon the font in use, but, for some widely used fonts,
confusion between "O" and "0", or "I", "l", and "1" need to be considered
as realistic possibilities.  The language tag reviewer SHOULD reject
registration requests for tags or subtags that could be confused in this
way  with existing ones.

Randy




_______________________________________________
Ltru mailing list
Ltru at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/ltru




Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.