Re:Phishing attack uses Unicode characters in domains to clo...
by userbinator on Saturday April 15, 2017 @06:38AM
(#14120197)
If the address bar URL and the certificate URL are different, then, at least for addresses in English, that should raise an alarm.
There's a mention below ( https://news.ycombinator.com/item?id=14119826 ) that some browsers will show the IDN in the certificate too, presumably because it would otherwise be equally confusing if they didn't match (they do match.) This isn't a problem that can be solved without showing both the IDN and punycode.
There's a mention below ( https://news.ycombinator.com/item?id=14119826 ) that some browsers will show the IDN in the certificate too, presumably because it would otherwise be equally confusing if they didn't match (they do match.) This isn't a problem that can be solved without showing both the IDN and punycode.