Re: SSL MITM fun.

[Berend-Jan Wever <berendjanwever () gmail com>]

On Thu, Feb 19, 2009 at 7:04 PM, Dan Moniz <dnm () pobox com> wrote:
> On Thu, Feb 19, 2009 at 12:07 PM, Dave Aitel <dave () immunityinc com> wrote:
> > 1. Register a .cn address and use unicode character for / and ? to
> > have HTTPS://www.paypal.com/?domain.cn?<some args> validate
>
> Unless I'm missing something, this is essentially what Eric Johanson
> said in 2005 about IDN:
> http://www.shmoo.com/idn/homograph.txt
If you have access, have a look at
https://bugzilla.mozilla.org/show_bug.cgi?id=441811
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave