[Last-Call] Re: Opsdir last call review of draft-klensin-idna-rfc5891bis-07

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello John, Linda, others,

Just a small aside below.

On 2024-10-25 03:42, John C Klensin wrote:

That is usually considered a rather different case from the notorious
"paypal" example (cited in the draft) where the Latin-script lower
case "a" characters can be maliciously replaced by Cyrillic
characters that, with most choices of type styles / fonts, usually
look identical.  One can substitute Cyrillic characters that look
more or less like "p" and "y" too, and maybe even the "l" (using
digit-one if needed), but those substitutions require more
assumptions about choices of type styles to avoiding looking alike
(or to cause it).  For example, does the Latin-script "p" look like
the Cyrillic-script "р" (U+0440)?   Maybe.  How about Latin "y" and
Cyrillic "ч" (U+0447)?

No need to use Cyrillic "ч" (U+0447). Cyrillic у (U+0443) does a much better job. "раура1" (also with a 'one' at the end) would look much more like "paypal" than "рачраӏ".

Regards,   Martin.

More likely to look different with typical
choices of fonts, but not necessarily so with all choices.  And, to
further complicate this, there is a human perception problem: if most
readers who are not expecting these issues and not sensitive to them
see "рачраӏ", they will perceive "paypal" and move on.

--
last-call mailing list -- last-call@xxxxxxxx
To unsubscribe send an email to last-call-leave@xxxxxxxx




[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Mhonarc]     [Fedora Users]

  Powered by Linux