Jean-Marc Desperrier wrote:
I'm left with the feeling this really should have been more widely documented.

Could be!

The existence of that protection was really hard to guess from the tld-idn-policy-list.html page :

It's not clear to me that the person who added the list even knew the page existed.

Good. But can a small committee find good solutions, or build consensus about them ?

No idea what you're asking here...

It seems like the right thing to do is to make the "this is the hostname of the site" ui somehow more prominent. Or possibly "this is the tld+2 of the site" or something. Some UI mockups would probably help more than anything else.

-Boris
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to