[tor-bugs] #21961 [Applications/Tor Browser]: shoult torbrowser enable network.IDN_show_punycode by default?
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun Apr 16 19:45:45 UTC 2017
#21961: shoult torbrowser enable network.IDN_show_punycode by default?
------------------------------------------+----------------------
Reporter: cypherpunks | Owner: tbb-team
Type: enhancement | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------------------+----------------------
Firefox and torbrowser do not show punycodes by default.
The attack vector is discussed here, including a demo:
https://www.wordfence.com/blog/2017/04/chrome-firefox-unicode-phishing/
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21961>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list