Re:Phishing with Unicode Domains
by iiv on Friday April 14, 2017 @10:57AM
(#14114809)
I have been aware of this since I tried to use Let's Encrypt with an IDN domain name. Back then, IDN-certificates were not allowed because of security concerns, but this has apparantly changed since then.[1]
I hope this will get fixed, but I cannot see how without limiting users who have IDN and want to use https. [1]https://letsencrypt.org/2016/10/21/introducing-idn-support.h...