I think a better (temporary) solution than just dropping IDN support would
be to always display the punycode encoded domain name instead of the
unicode version (Urlbar/Statusbar always shows www.xn--mozlla-5va.org
instead of www.moz�lla.org).
Turning off IDN support may do that in some cases, depending on how the link to the IDN domain is encoded.
This option was chosen because of the tight timescales involved; all other options involved code changes.
Gerv _______________________________________________ Mozilla-security mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-security
