Comments on: OpenDNS Continued http://dready.org/blog/2006/09/12/opendns-continued/ Fri, 05 Dec 2008 16:25:37 +0000 http://wordpress.org/?v=2.6.2 By: wil http://dready.org/blog/2006/09/12/opendns-continued/#comment-128 wil Tue, 12 Sep 2006 02:10:27 +0000 http://dready.org/blog/2006/09/12/opendns-continued/#comment-128 Hi David, Yes, the difference is that it's easier to detect ASCII homographs like between 'I' and '1', 'O' and '0', etc. With IDN some characters are really visually indistinguishable when rendered in some fonts. For example, this one was registered by Eric Johanson to demonstrate the vulnerability: http://pаypal.com (It doesn't resolve right now as Eric is trying to return it back to the real Paypal) Hi David,

Yes, the difference is that it’s easier to detect ASCII homographs like between ‘I’ and ‘1′, ‘O’ and ‘0′, etc. With IDN some characters are really visually indistinguishable when rendered in some fonts. For example, this one was registered by Eric Johanson to demonstrate the vulnerability: http://pаypal.com

(It doesn’t resolve right now as Eric is trying to return it back to the real Paypal)

]]> By: David Ulevitch http://dready.org/blog/2006/09/12/opendns-continued/#comment-127 David Ulevitch Tue, 12 Sep 2006 02:00:58 +0000 http://dready.org/blog/2006/09/12/opendns-continued/#comment-127 Good comments. I'm in a flow now so no long response, but quick question: Is there anything about IDN homographs that is more interesting than just domain name homographs in general? Or am I missing your point... -david Good comments. I’m in a flow now so no long response, but quick question:

Is there anything about IDN homographs that is more interesting than just domain name homographs in general? Or am I missing your point…

-david

]]>