Closed Bug 1781182 Opened 3 years ago Closed 3 years ago

International characters makes URL Góogle indistinguishable from Google

Categories

(Firefox :: Untriaged, enhancement)

Product:
Firefox
Component:
Untriaged
Version:
Firefox 102
Type:
enhancement

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1507582

People

(Reporter: Michael, Unassigned)

Details

Steps to reproduce:

Type:

bankofámerica.com

into the URL. If a hacker buys this domain, the average Joe is totally screwed because you display it as WYSIWYG. To most people they'll think the accent over the a is a spot on their screen.

Actual results:

Average user gets spoofed and hacked.

Expected results:

I would suggest that you very clearly mark letters in the URL that are greater than ASCII 127.

In this case of bankofämerica.com you could display the ä in a bold colored font so that it is clearly visible to the user that some of the characters in the domain are non-ASCII.

This is a well-known problem that is not trivial to address, and the current best-known strategy is documented in bug 1507582.

Status: UNCONFIRMED → RESOLVED
Closed: 3 years ago
Resolution: --- → DUPLICATE
Group: firefox-core-security
You need to log in before you can comment on or make changes to this bug.