Author christian.heimes
Recipients abracadaber, christian.heimes, yselivanov
Date 2016-11-02.11:02:27
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1478084548.13.0.957140607991.issue28414@psf.upfronthosting.co.za>
In-reply-to
Content
It's a big, complicated mess. I can't implement IDN support correctly because Python lacks UTS#46 and IDNA2008 support. I just found out that IDNA 2008 is not enough because it does not provide a case mapping. Lack of case mapping broke my fix for curl CVE-2016-8625.

At the moment IDN support is broken in a sane way: it just doesn't work and fails.

A partial fix will introduce security issues. http://unicode.org/reports/tr46/#Processing lists "www.sparkasse-gie├čen.de" as a critical example. It's the domain of a German savings and loan bank.
History
Date User Action Args
2016-11-02 11:02:28christian.heimessetrecipients: + christian.heimes, yselivanov, abracadaber
2016-11-02 11:02:28christian.heimessetmessageid: <1478084548.13.0.957140607991.issue28414@psf.upfronthosting.co.za>
2016-11-02 11:02:28christian.heimeslinkissue28414 messages
2016-11-02 11:02:27christian.heimescreate