[Webkit-unassigned] [Bug 275493] New: Domain names with special characters (IDNs) are displayed in punycode in the passkey mediation UI.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jun 14 09:46:04 PDT 2024


https://bugs.webkit.org/show_bug.cgi?id=275493

            Bug ID: 275493
           Summary: Domain names with special characters (IDNs) are
                    displayed in punycode in the passkey mediation UI.
           Product: WebKit
           Version: Safari 17
          Hardware: All
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: appleid.designo at gmail.com
                CC: bfulgham at webkit.org, simon.fraser at apple.com,
                    zalan at apple.com

Created attachment 471677

  --> https://bugs.webkit.org/attachment.cgi?id=471677&action=review

passkey mediation UI with an IDN displayed in punycode

As mentioned in issue #2087 (https://github.com/w3c/webauthn/issues/2087), domain names with special characters (IDNs) are displayed in punycode instead of unicode in the passkey mediation UI. This makes it confusing for users and can lead to major trust issues of the domain. It would be good if the domain name was converted to punycode but still displayed in unicode in the conditional UI. Overall I think the domain should be converted to punycode but always displayed in unicode for the users.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240614/36c9e902/attachment.htm>


More information about the webkit-unassigned mailing list