this post was submitted on 22 Sep 2025
102 points (96.4% liked)

Technology

75472 readers
2756 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
102
Thoughts on Cloudflare (xn--gckvb8fzb.com)
submitted 2 days ago by Pro@programming.dev to c/technology@lemmy.world
24 comments fedilink hide all child comments
 

cross-posted from: https://programming.dev/post/37897811

you are viewing a single comment's thread
view the rest of the comments
[–] sem@lemmy.blahaj.zone 1 points 9 hours ago (1 children)

Because it does not match google.com

[–] darklamer@lemmy.dbzer0.com 1 points 7 hours ago (1 children)

But that line of reasoning presupposes both that the right name is in ASCII and that the user knows this. As soon as either one of those isn't true, showing the Punycode no longer is of any help in determining which one is the right one.

[–] sem@lemmy.blahaj.zone 1 points 4 hours ago (1 children)

For most security - centric websites, the right name is ASCII only.

For any that aren't, people would have the opportunity to become familiar with the correct fingerprint over time and have a chance to notice a difference.

I'm curious to hear if you think there is a better way. What I'm saying is unlikely to ever be implemented in a browser and I'm not trying to convince you or anything, just say why I personally would appreciate it.

[–] darklamer@lemmy.dbzer0.com 2 points 3 hours ago (1 children)

For most security - centric websites, the right name is ASCII only.

Are you perhaps by any chance American?

I’m curious to hear if you think there is a better way.

I think a much better solution would be to shield end users from this problem entirely, by having all registries refuse to register such confusable names, as recommended by Unicode:

https://www.unicode.org/reports/tr46/tr46-34.html#Registries

[–] sem@lemmy.blahaj.zone 1 points 10 minutes ago

Yep. Do you all have important URLs with Unicode characters?

I think it would be great if registries screened registrations for confusable names. Even if they did though, I wouldn't expect them to succeed 100%