Nearly all 2020 presidential candidates aren’t using a basic email security

Re:Nearly all 2020 presidential candidates aren’t using a ba... by nine_k on Tuesday April 30, 2019 @08:58PM (#19793575)

It has a reasonable workaround: check that all glyphs belong to the same writing system. That is, post.com should have all glyphs from Latin, почта.рф, all glyphs from Cyrillic, and ταχυδρομείο.ελληνικό must have all letters Greek. The fact that the Latin, Cyrillic, and Greek glyphs have same-looking glyphs like o or p is not dangerous if you can't mix them up.

[ Parent | on HN ]

Re:Nearly all 2020 presidential candidates aren’t using a ba... by egwynn on Wednesday May 01, 2019 @02:32PM (#19800189)

That's a cool idea and will normally work, but won't prevent homograph attacks entirely. Identities can still be spoofed if they can be constructed entirely from glyphs in the intersection of two unicode blocks. E.g. `ΝΙΚΕ.ϹΟΜ` and `NIKE.COM`.

[ Parent | on HN ]

Re:Nearly all 2020 presidential candidates aren’t using a ba... by nine_k on Wednesday May 01, 2019 @02:36PM (#19800229)

Lowercasing them would let the user tell the lowercase L from uppercase i.

But I agree, some things may need to be special-cased.

[ Parent | on HN ]