Bugtraq mailing list archives

Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.

From: Jerome ATHIAS <jerome.athias () free fr>
Date: 8 Feb 2005 14:47:24 -0000

In-Reply-To: <20050208043921.17342.qmail () www securityfocus com>

Verified under Windows XP SP2 with Firefox 1.0 (MOOX M3)

SpoofStick (http://www.corestreet.com/spoofstick/) is also tricked (what about netcraft...?).

Regards,
Jerome

Current thread:

Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Jerome ATHIAS (Feb 08)