Java Solaris Communities Sun Store Join SDN My Profile Why Join?
 
Bug Database
Bug Detail
Quick Lists
Top 25 Bugs
Top 25 RFE's
Recently Closed Bugs
Printable Page Printable Page


Bug Database
Bug ID: 4737170
Votes 0
Synopsis RFE: International Domain Names
Category java:classes_net
Reported Against 1.4 , tiger-beta2
Release Fixed mustang(b40)
State 10-Fix Delivered, request for enhancement
Priority: 3-Medium
Related Bugs 6442027 , 5085902
Submit Date 27-AUG-2002
Description



An IETF working group is defining a standard for
international domain names based on the full Unicode character set
(current domain names are limited to ASCII). Information on this
standard is available at http://ietf.org/html.charters/idn-charter.html
and http://www.i-d-n.net/.

The java.net classes that operate on domain names should be updated to
support international domain names when the standard becomes available.
======================================================================

  xxxxx@xxxxx   2004-09-17

Now that the standards related to IDNs are available from IETF, we should support it in Mustang. Here is a list of the relevent RFCs:

RFC 3490 Internationalizing Doamin Names in Applications (IDNA)
RFC 3491 Nameprep: A Stringprep Profile for Internationalized Domain Names (IDN)
RFC 3492 Punycode: A bootstring encoding of Unicode for Internationalized Domain          Names in Applications (IDNA)
RFC 3454 Preparation of Internationalized Strings ("stringprep")
Work Around
N/A
Evaluation
There are various dependencies and implications for this RFE - these
include changes to URI/URL to cope with IDNs encoded in URIs, OS
dependencies as the default name service provider using the platform
resolver, and changes to the DNS name service provider based on JNDI-DNS.

  xxxxx@xxxxx   2002-09-02

The ccc request has been submitted.
  xxxxx@xxxxx   2005-04-19 09:07:44 GMT

The initial solution was to support IDN transparently, i.e. add Unicode <-> ACE conversion into InetAddress.getByName and InetAddress.getAllByName and don't let end user know the existence of such facility. It's regarded too risky, e.g. IDN suffers attacks like monograph attack.

This is why we choose current solution for IDN.

As Alan said in his comment, URI class also need to be changed to cope with IDN encode. This will be done in RFE 5085902.
  xxxxx@xxxxx   2005-06-01 03:23:01 GMT
Comments
  
  Include a link with my name & email   

Submitted On 13-JUN-2005
elendal1
International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
http://www.shmoo.com/idn/homograph.txt



PLEASE NOTE: JDK6 is formerly known as Project Mustang