RE: International domain names may pose threat

From: Nick Wilsdon (n.wilsdon@e3internet.com)
Date: Fri Feb 11 2005 - 15:06:00 EST


Hi Enrico,

Yes it's not much a solution to disable IDN, you're right.

The modification suggested for Firefox is not a valid solution anyway -
unfortunately when you restart the browser the setting returns to
normal.

http://forums.mozillazine.org/viewtopic.php?t=214914&postdays=0&postorde
r=asc&postsperpage=15&start=0

You can follow this thread if you are interested in this and maybe they
will find a solution.

I think the only way to address this issue would be to move users
towards better use/understanding of SSL certificates. If I could make a
change here, I would develop a colour coded system, instead of always
using the standard yellow lock icon. For example a range of colours from
red for no match on all authorisation points to green for everything
checking out on the SSL certificate + company name validated. Traffic
light colours basically.

Having the same symbol for 'secure' when there are so many different
factors involved, does maybe lull people into a false sense of security.
I know the warnings do appear (although jumping between two SSL sites
makes them a bit temperamental) but overall these are too technical and
not particularly user friendly. Most of the clients I have ever spoken
to on this issue believe that as long as the little padlock appears,
warnings or not, they are perfectly safe.

I'm sure I have missed the complexity of all this though. :)

Best

Nick

Managing Director
e3internet
http://www.e3internet.com

 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.7 - Release Date: 10/02/2005



This archive was generated by hypermail 2.1.3 : Mon Feb 28 2005 - 23:00:01 EST