Impersonating the brave.com website to deliver malware

Re:Impersonating the brave.com website to deliver malware by rphln on Sunday August 01, 2021 @11:03AM (#28026741)

It is probably already too late to put this in practice, as it is a breaking change, but...

Wouldn't applying Unicode normalization on domains solve this issue? For example, if a site attempts to send me to “ápple.com”, my user-agent would send me to the correct domain. Domains in Japanese, for example, would still work just fine.

Ideally, this would be handled at the DNS spec level (“no two domains shall map to the same normalized form”), but that would be even more “too late” to change.

[ Parent | on HN ]

Re:Impersonating the brave.com website to deliver malware by imglorp on Sunday August 01, 2021 @11:10AM (#28026808)

This could be done at the client level using some normalization plus a bit of reputation.

"Did you intend to go to “ápple.com” (suspected malware host), or “apple.com” (100b visitors a year)?

[ Parent | on HN ]