|
Quick Lists
|
|
Bug ID:
|
4737170
|
|
Votes
|
0
|
|
Synopsis
|
RFE: International Domain Names
|
|
Category
|
java:classes_net
|
|
Reported Against
|
1.4
, tiger-beta2
|
|
Release Fixed
|
mustang(b40)
|
|
State
|
10-Fix Delivered,
request for enhancement
|
|
Priority:
|
3-Medium
|
|
Related Bugs
|
6442027
,
5085902
|
|
Submit Date
|
27-AUG-2002
|
|
Description
|
An IETF working group is defining a standard for
international domain names based on the full Unicode character set
(current domain names are limited to ASCII). Information on this
standard is available at http://ietf.org/html.charters/idn-charter.html
and http://www.i-d-n.net/.
The java.net classes that operate on domain names should be updated to
support international domain names when the standard becomes available.
======================================================================
xxxxx@xxxxx 2004-09-17
Now that the standards related to IDNs are available from IETF, we should support it in Mustang. Here is a list of the relevent RFCs:
RFC 3490 Internationalizing Doamin Names in Applications (IDNA)
RFC 3491 Nameprep: A Stringprep Profile for Internationalized Domain Names (IDN)
RFC 3492 Punycode: A bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)
RFC 3454 Preparation of Internationalized Strings ("stringprep")
|
|
Work Around
|
N/A
|
|
Evaluation
|
There are various dependencies and implications for this RFE - these
include changes to URI/URL to cope with IDNs encoded in URIs, OS
dependencies as the default name service provider using the platform
resolver, and changes to the DNS name service provider based on JNDI-DNS.
xxxxx@xxxxx 2002-09-02
The ccc request has been submitted.
xxxxx@xxxxx 2005-04-19 09:07:44 GMT
The initial solution was to support IDN transparently, i.e. add Unicode <-> ACE conversion into InetAddress.getByName and InetAddress.getAllByName and don't let end user know the existence of such facility. It's regarded too risky, e.g. IDN suffers attacks like monograph attack.
This is why we choose current solution for IDN.
As Alan said in his comment, URI class also need to be changed to cope with IDN encode. This will be done in RFE 5085902.
xxxxx@xxxxx 2005-06-01 03:23:01 GMT
|
|
Comments
|
Submitted On 13-JUN-2005
elendal1
International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
http://www.shmoo.com/idn/homograph.txt
PLEASE NOTE: JDK6 is formerly known as Project Mustang
|
|
|
 |