Message279920
It's a big, complicated mess. I can't implement IDN support correctly because Python lacks UTS#46 and IDNA2008 support. I just found out that IDNA 2008 is not enough because it does not provide a case mapping. Lack of case mapping broke my fix for curl CVE-2016-8625.
At the moment IDN support is broken in a sane way: it just doesn't work and fails.
A partial fix will introduce security issues. http://unicode.org/reports/tr46/#Processing lists "www.sparkasse-gießen.de" as a critical example. It's the domain of a German savings and loan bank. |
|
Date |
User |
Action |
Args |
2016-11-02 11:02:28 | christian.heimes | set | recipients:
+ christian.heimes, yselivanov, abracadaber |
2016-11-02 11:02:28 | christian.heimes | set | messageid: <1478084548.13.0.957140607991.issue28414@psf.upfronthosting.co.za> |
2016-11-02 11:02:28 | christian.heimes | link | issue28414 messages |
2016-11-02 11:02:27 | christian.heimes | create | |
|