On Fri, 28 Apr 2017 10:56:45 +0200 Matus UHLAR - fantomas wrote: > On 22.04.17 00:37, Benny Pedersen wrote: > >https://www.xudongz.com/blog/2017/idn-phishing/ > > > >should we care in spammassassin ? > > yes. > > >i ask since its solved in chrome, but its entirely a bad nic tld > >handling on that isssue > > > >if idn decode gives 7bit domain hostname, its a fake domain > > agreed.
I'm not even sure what he meant by that; a literal reading of "gives 7bit domain hostname" suggests something like: Ångström.example.con which seems fine to me. If he meant something like xn--example.com it seems unlikely that *any* registrar would allow that to be registered as an ordinary ascii domain.
