[Pkg-kde-bugs-fwd] [Bug 98788] Possible solution to IDN domain spoofing/phising
George Staikos
98788@bugs.kde.org
3 Mar 2005 14:56:25 -0000
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
http://bugs.kde.org/show_bug.cgi?id=98788
------- Additional Comments From staikos kde org 2005-03-03 15:56 -------
On Thursday 03 March 2005 08:11, Waldo Bastian wrote:
> I think there may be an additional problem with our IDN support.
> According to https://bugzilla.mozilla.org/show_bug.cgi?id=279099#c14
> KSSL verifies the certificate against the Unicode form instead of the puny
> encoded form.
>
> I suspect that KSSL handles this incorrect.
>
> That is something that should be verified and fixed.
Yes it's the case. ksslpeerinfo.cc has the relevant code.