Re:Phishing with Unicode Domains
by Jonnax on Thursday April 20, 2017 @05:35AM
(#14155198)
Ouch. This is a good one.
Whilst it's easy to say "Just enable punicode always"
People that use the web in different languages lose a lot of functionality because of it.
I could imagine a solution would be to collect a list of homogliphs then when the browser suspects an overlap it does a search for similarly spelt sites then warns the user of the possibility of the site being an imitation.
Of course then also converting the URL in the address bar to punicode.
Re:Phishing with Unicode Domains
by 3131s on Thursday April 20, 2017 @07:55AM
(#14155839)
How about an icon next to the URL bar that displays and allows a user to select their preferred Unicode block(s)? If a character in the URL falls outside that block then the URL is highlighted in red or some warning is displayed.
Whilst it's easy to say "Just enable punicode always" People that use the web in different languages lose a lot of functionality because of it.
I could imagine a solution would be to collect a list of homogliphs then when the browser suspects an overlap it does a search for similarly spelt sites then warns the user of the possibility of the site being an imitation. Of course then also converting the URL in the address bar to punicode.
What other ideas are there?