On Wed, 2 Nov 2016, Simon Josefsson wrote:

>> Based on this, I suppose my recommendation is that people simply switch off
>> IDN support in curl builds until further notice to stay safe. The old way
>> was open for trickery and the new way is incomplete.
>
> What trickery are you referring to?

IDNA 2003 makes us use the wrong host for .de host names using ß:

   https://curl.haxx.se/docs/adv_20161102K.html

-- 
  / daniel.haxx.se

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2016-11-02