Skip navigation

Implement new IDNA2008 standards please!

423 Views 9 Replies Latest reply: Oct 18, 2013 4:48 PM by Tom Gewecke RSS
RETRAX Calculating status...
Currently Being Moderated
Oct 12, 2013 3:14 AM

Hello Safari / WebKit-Team,

 

The .de NIC (denic.de) will implement IDNA2008 from 2010-11-16 onwards,

especially allowing for ß (\u00df) in domain names. Hence, the automatic

translation of ß to ss may result in looking up the wrong domain name, allowing

for spoofing attacks.

(DENIC will run a sunrise period (2010-10-26 to 2010-11-15) during which

holders of domains with ss will be allowed top register the respective ß domain

in advance.)

 

http://www.denic.de/en/domains/internationalized-domain-names/sharp-s.html

 

ß and ss are not exchangable in German. ss instead of ß is just a makeshift. Germans expect ß to usually just work if

umlauts work (which already do for a while).

 

Steps to Reproduce:

1. Start Safari on OS X Mountain Lion or on iOS

2. Open the domain "http://www.heß.de" (a family name).

 

 

Expected Results:

Safari will change the "ß" character to "ss" and open "http://www.hess.de" which is a completely different family name (last name).

 

For example: "Michael Heß" and "Peter Hess".

 

 

Thanks & Regards

 

Michael

iMac, OS X Mountain Lion (10.8.5)
  • Klaus1 Level 8 Level 8 (43,345 points)
    Currently Being Moderated
    Oct 12, 2013 5:01 AM (in response to RETRAX)

    You are not actually contacting Apple here, we are all just fellow users!

     

    You can send your suggestion via the Feedback link. You won't receive a reply but Apple will see it.

     

    Where to send product feedback to Apple:

     

    http://www.apple.com/feedback/

  • Tom Gewecke Level 9 Level 9 (70,815 points)
    Currently Being Moderated
    Oct 12, 2013 6:24 AM (in response to RETRAX)

    Does Firefox behave the same way for you?

  • Tom Gewecke Level 9 Level 9 (70,815 points)
    Currently Being Moderated
    Oct 12, 2013 10:54 AM (in response to Klaus1)

    .

  • Tom Gewecke Level 9 Level 9 (70,815 points)
    Currently Being Moderated
    Oct 12, 2013 10:54 AM (in response to RETRAX)

    PS My research indicates that no browser has so far adopted the behavior you are requesting regarding ß because of security concerns about spoofing of web addresses.

     

    If you have a contrary example, let us know.

  • Tom Gewecke Level 9 Level 9 (70,815 points)
    Currently Being Moderated
    Oct 12, 2013 3:09 PM (in response to RETRAX)

    RETRAX wrote:

     

    Opera Browser V12.15 is the only Browser which do it right (for the moment).

     

    But my Opera is V17 and no longer does it.

     

    Thanks much for the bugzilla link which shows why no one is doing it.  Regardless of the standard, browser makers are worried about getting blamed for the potentially dangerous spoofing that can result from careless practices of the people who sell domain names.

     

    It will be interesting to see if Chrome becomes the first to separate ß and ss,

  • Tom Gewecke Level 9 Level 9 (70,815 points)
    Currently Being Moderated
    Oct 13, 2013 6:08 AM (in response to RETRAX)

    RETRAX wrote:

     

    But if IDNA2008 is realized in the newest Chromium-Nightlys... let us hope that Apple and Mozilla will have IDNA2008-Support in the next 3-5 years...

     

    I had look at Chrome Canary, but it did not seem to do this yet either.  Will try to check the older Opera.  Indeed I think all browsers should move quickly in this direction as soon as they can feel more secure about how domain registries are behaving, and the registries can't make make much money selling urls that the main browsers won't go to.

  • Tom Gewecke Level 9 Level 9 (70,815 points)
    Currently Being Moderated
    Oct 18, 2013 4:48 PM (in response to RETRAX)

    In addition to the old Opera version, I found that both the iOS and OS X versions of the iCab browser do what you want with ß.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.