On Sat, Jan 28, 2023 at 05:26:24PM -0500, John C Klensin wrote:

Thanks for the clear and detailed exposition of the status quo.
Just one nit:

> (ii) Special character interpretations given by IDNA2003 but
> removed by IDNA2008, notably including the mapping of Eszett
> (Sharp S, U+00DF) to "ss" and the treatment of Dotless I
> (U+0131) remained as given in IDNA2003.   See Section 1.3.2 of
> version 15.0.0 of UTS#46.

This is if "transitional" mappings are enabled.  Applications should no
longer enable transitional mappings, and I expect most don't.

    $ dig -t mx +noall +qu +ans +noidnout straße.de
    ;xn--strae-oqa.de.              IN      MX
    xn--strae-oqa.de.       79      IN      MX      5 smtpin.rzone.de.

    $ posttls-finger -Lsummary -c straße.de
    posttls-finger: straße.de asciified to xn--strae-oqa.de
    posttls-finger: Untrusted TLS connection established
      to smtpin.rzone.de[2a01:238:20a:202:50f0::1097]:25:
      TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
      key-exchange X25519
      server-signature RSA-PSS (2048 bits)
      server-digest SHA256

In other respects, the situation is, best I know, as you described.

You're also quite right application developers are typically not expert
in the fine-details, and this is where library defaults matter.  Postfix
flags when initialising LibICU are just:

    - UIDNA_NONTRANSITIONAL_TO_ASCII

Additional possibilities are:

    
https://unicode-org.github.io/icu-docs/apidoc/dev/icu4c/uidna_8h.html#a726ca809ffd3d67ab4b8476646f26635aa1eb63014cdaf41c7ea6cf3abecf1169

    - UIDNA_ALLOW_UNASSIGNED
    - UIDNA_USE_STD3_RULES
    - UIDNA_CHECK_BIDI
    - UIDNA_CHECK_CONTEXTJ
    - UIDNA_CHECK_CONTEXTO

and perhaps we should also be setting some of the last three...

-- 
    Viktor.

_______________________________________________
Uta mailing list
Uta@ietf.org
https://www.ietf.org/mailman/listinfo/uta

Reply via email to