638022 - IDN domain names does not show properly in the adress bar

Status: RESOLVED WONTFIX

(Core Graveyard :: Networking: Domain Lists, defect)

Description

[monsieur1875]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.0.19) Gecko/2011012515 Firefox/3.0.19 Flock/2.6.2
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.0.19) Gecko/2011012515 Firefox/3.0.19 Flock/2.6.2

IDN Domain names does not show properly in the adress bar.
It  shows punny code instead of local characters.
This is a real problem for our users. 
Please fix this on .net and .com domains.
Thanks in advance
Regards

Reproducible: Always



Expected Results:  
The adress bar should show http://www.séoul.net instead of http://xn--soul-bpa.net/

This problems leaves out so many users (think of all chineses domains, the latin domains like mine,ect...)

Comment 1

[Cork]

Mozilla has a whitelist system for what top level domains to support punycode:
http://www.mozilla.org/projects/security/tld-idn-policy-list.html

This sounds related to bug 607938 if nothing else, but not sure.

Moving to the right component for now.

Comment 2

[Jo Hermans]

.net is indeed not safe to use for IDN domain names. .com and .net are indeed the biggest stumbling blocks to adopt these IDN domain names, as they don't have any rules to prevent homographi similar names. But .org is already fixed !

Comment 3

[Petr Janeček]

This is more a feature request than a bug.
The thing is, when there's a link with diacritics, like http://háčkyčárky.cz, the right site is then loaded and shown. But the address bar shows rubbish (http://www.xn--hkyrky-ptac70bc.cz/).
We don't mind how the name is internally interpreted, we want to see a nice and working URL, that's why it was created in the first place - to be readable and easily rememberable.
Or is there a reason (security, for instance?) not to show the original URL, but transmuted code?

Comment 4

[Jo Hermans]

See <http://www.mozilla.org/projects/security/tld-idn-policy-list.html> : .cz isn't in the list of "IDN-safe" top level domains. See <http://en.wikipedia.org/wiki/IDN_homograph_attack> for what the security problem is.

Comment 5

[[e-mail]]

Attachment: TB 24 does not show any idn names

TB 24 should be able to handle IDN names. It shows punycode instead.