[Pkg-kde-bugs-fwd] [Bug 98788] Possible solution to IDN domain spoofing/phising

George Staikos 98788@bugs.kde.org
3 Mar 2005 14:56:25 -0000


------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
         
http://bugs.kde.org/show_bug.cgi?id=98788         




------- Additional Comments From staikos kde org  2005-03-03 15:56 -------
On Thursday 03 March 2005 08:11, Waldo Bastian wrote:
> I think there may be an additional problem with our IDN support.
> According to https://bugzilla.mozilla.org/show_bug.cgi?id=279099#c14
> KSSL verifies the certificate against the Unicode form instead of the puny
> encoded form.
>
> I suspect that KSSL handles this incorrect.
>
> That is something that should be verified and fixed.

   Yes it's the case.  ksslpeerinfo.cc has the relevant code.