<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:michael@roessner.us" title="Michael <michael@roessner.us>"> <span class="fn">Michael</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - More IDNs containing Unicode combining marks should probably be displayed as punycode"
href="https://bugs.webkit.org/show_bug.cgi?id=126627">bug 126627</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>michael@roessner.us
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - More IDNs containing Unicode combining marks should probably be displayed as punycode"
href="https://bugs.webkit.org/show_bug.cgi?id=126627#c7">Comment # 7</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - More IDNs containing Unicode combining marks should probably be displayed as punycode"
href="https://bugs.webkit.org/show_bug.cgi?id=126627">bug 126627</a>
from <span class="vcard"><a class="email" href="mailto:michael@roessner.us" title="Michael <michael@roessner.us>"> <span class="fn">Michael</span></a>
</span></b>
<pre>Summary:
The .de NIC (denic.de) will implement IDNA2008 from 2010-11-16 onwards,
especially allowing for ß (\u00df) in domain names. Hence, the automatic
translation of ß to ss may result in looking up the wrong domain name, allowing
for spoofing attacks.
(DENIC will run a sunrise period (2010-10-26 to 2010-11-15) during which
holders of domains with ss will be allowed top register the respective ß domain
in advance.)
<a href="http://www.denic.de/en/domains/internationalized-domain-names/sharp-s.html">http://www.denic.de/en/domains/internationalized-domain-names/sharp-s.html</a>
ß and ss are not exchangable in German. ss instead of ß is just a makeshift. Germans expect ß to usually just work if
umlauts work (which already do for a while).
Steps to Reproduce:
1. Start Safari on OS X Mountain Lion or on iOS (the same on El Capitan and iOS 9.x)
2. Open the domain "<a href="http://www.heß.de">http://www.heß.de</a>" (a family name).
Expected Results:
Safari will change the "ß" character to "ss" and open "<a href="http://www.hess.de">http://www.hess.de</a>" which is a completely different family name (last name). For example: "Michael Heß" and "Peter Hess".
FireFox Nightly Version 46.0a1 (and newer) did it now correct.
Here are some informations:
<a href="https://hg.mozilla.org/mozilla-central/rev/ac843b130537">https://hg.mozilla.org/mozilla-central/rev/ac843b130537</a>
<a href="https://hg.mozilla.org/mozilla-central/rev/dd3d6c83f354">https://hg.mozilla.org/mozilla-central/rev/dd3d6c83f354</a>
<a href="https://hg.mozilla.org/mozilla-central/rev/f23234d57557">https://hg.mozilla.org/mozilla-central/rev/f23234d57557</a>
And the FireFox Bug Thread for this issue:
<a href="https://bugzilla.mozilla.org/show_bug.cgi?id=479520">https://bugzilla.mozilla.org/show_bug.cgi?id=479520</a>
You can check the following Websites in FireFox Nightly Version 46.0a1 (2016-01-24) to understand:
<a href="http://www.roessner.de">http://www.roessner.de</a>
<a href="http://www.rössner.de">http://www.rössner.de</a>
(is linked to www.roessner.de because it's the same owner, but it's also a separate name in Germany).
<a href="http://www.rößner.de">http://www.rößner.de</a>
For example:
Bill Roessner
Jack Rössner
Mike Rößner
The browsers do it right with "roessner" and "rössner" and separate it because these are different names.
Now, it's time to do it also right with the "ß" character.
For now i have to use the URL in Safari:
<a href="http://www.xn--rner-vna1l.de">http://www.xn--rner-vna1l.de</a>
if i want to go to:
<a href="http://www.rößner.de">http://www.rößner.de</a>
thanks & kind regards
Michael</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>