Shmoo Group exploit: 0wn any domain, no defense exists

Shmoo Group exploit: 0wn any domain, no defense exists:

A new exploit using International Domain Name [IDN] support was announced by Shmoo.
The exploits are known as a homograph attach, because they exploit IDN, which has a large number of codepages/scripts which look very similar to latin character sets. An example of this exploit is that your web browser is saying www.paypal.com when its pulling a page from www.xn--pypal-4ve.com.

Its not clear what will solve this problem. Right now, the solution is turning off IDN. This solution throws the baby out with the bathwater.

Posted by rshah on February 08, 2005| Comments (0)


Corporate Networks Send to a friend Feedback VeriSign solves multilingual name dilemma

Corporate Networks Send to a friend Feedback VeriSign solves multilingual name dilemma
Just days before RealNames' keyword system will cease operations, VeriSign Global Registry Services has released its own free software plug-in as an alternative for resolving the 1 million non-English language domain names sold to date. For the past year, VeriSign used RealNames' keyword service to resolve queries for domain names in such complex languages as Arabic, Japanese, Chinese and Korean.

Posted by rshah on July 02, 2002| Comments (0)


IETF wraps up foreign-language domain name effort

IETF wraps up foreign-language domain name effort
The Internet's main standards-setting body is putting the final touches on a set of specifications that will support foreign-language domain names instead of today's English language derivatives. Called Internationalized Domain Name (IDN), the new specifications are eagerly awaited by domain name registries and registrars, which anticipate a huge market opportunity in Europe and Asia.

Posted by rshah on December 13, 2001| Comments (0)


New Non-English Domains Deal Criticized

New Non-English Domains Deal Criticized
A plan to allow the Internet domain Name System to recognize languages other than English is being criticized as creating more problems than it solves, by either overloading existing routers or splitting sections off so they can't be reached by everyone.

Posted by rshah on August 08, 2001| Comments (0)


IETF stays course on international domain names

IETF stays course on international domain names
Patents be damned! That's the consensus of network engineers developing an industry standard for supporting foreign-language domain names in the Internet.

Posted by rshah on July 11, 2001| Comments (0)


Why Unicode Will Work On The Internet

Why Unicode Will Work On The Internet
Ken Whistler sent in the lengthy and rather pointed response below to the article "Why Unicode Won't Work On The Internet

Posted by rshah on June 09, 2001| Comments (0)


ICANN members say Internet not ready for non-English domain names

ICANN members say Internet not ready for non-English domain names
Some members of an Internet oversight organization are seeking to delay to deployment of non-English domain names, warning that the Internet isn't quite ready to accommodate them.

Posted by rshah on June 05, 2001| Comments (0)


Why Unicode Won't Work on the Internet

Why Unicode Won't Work on the Internet
Linguistic, Political, and Technical Limitations By Norman Goundry, see also Slashdot

Posted by rshah on June 05, 2001| Comments (0)


VeriSign expands domain names to over 350 languages

VeriSign expands domain names to over 350 languages
VeriSign announced that it has added support for an additional 180 languages, bringing the total number of languages available in which to register domain names to more than 350.

Posted by rshah on April 26, 2001| Comments (0)


Registering Multi-Lingual Domains

Registering Multi-Lingual Domains
Have a customer that needs a domain name registered in Hebrew, Gujarati, or Cherokee? Register.com is pre-registering new multi-lingual domain names now.

Posted by rshah on March 31, 2001| Comments (0)


Patent flap slows multilingual domain name plan

Patent flap slows multilingual domain name plan
Intellectual property claims have blindsided the Internet Engineering Task Force and could derail the group's efforts to develop a common scheme for supporting foreign-language domain names across the Internet, see also Slashdot

Posted by rshah on March 29, 2001| Comments (0)


Changes afoot at the IETF

Changes afoot at the IETF
The IETF most significant projects involve creating a way for the Internet's domain name system to support languages other than English. The IETF is weighing two technical solutions for this complex problem: either converting foreign language characters into Unicode and then encoding them in ASCII for transmission over the Internet; or creating a directory layer on top of the DNS to perform this translation function.

Posted by rshah on March 22, 2001| Comments (0)


Unicode-based software lets servers recognize URLs spelled with Chinese characters

Unicode-based software lets servers recognize URLs spelled with Chinese characters

Posted by rshah on November 16, 2000| Comments (0)


CONCERN OVER NON-ENGLISH DOMAINS

CONCERN OVER NON-ENGLISH DOMAINS
Concern was expressed over the introduction of Asian characters for domains. Critics suggest that the new domains could cause network instability given the lack of standards for non-English characters.

Posted by rshah on November 14, 2000| Comments (0)


Foreign-Character Domain Names and New Top-Level Domains Create More Trademark Issues

Foreign-Character Domain Names and New Top-Level Domains Create More Trademark Issues
from Gigalaw.com

Posted by rshah on November 14, 2000| Comments (0)


Foreign characters to become part of Internet domain names

Foreign characters to become part of Internet domain names

Posted by rshah on June 24, 2000| Comments (0)


Syndicate this site (XML)
rajivshah.com