curl-library
Re: libidn2 support
From: Jan Ehrhardt <phpdev_at_ehrhardt.nl>
Date: Wed, 02 Nov 2016 18:30:32 +0100
Date: Wed, 02 Nov 2016 18:30:32 +0100
Daniel Stenberg in gmane.comp.web.curl.library (Wed, 2 Nov 2016 10:30:45
+0100 (CET)):
>On Wed, 2 Nov 2016, Simon Josefsson wrote:
>
>>> Based on this, I suppose my recommendation is that people simply switch off
>>> IDN support in curl builds until further notice to stay safe. The old way
>>> was open for trickery and the new way is incomplete.
>>
>> What trickery are you referring to?
>
>IDNA 2003 makes us use the wrong host for .de host names using ß:
>
> https://curl.haxx.se/docs/adv_20161102K.html
Any idea what libicu is doing? It seems to have both IDNA2003 and
IDNA2008 support.
-- Jan ------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.htmlReceived on 2016-11-02