December 2018 - UA-discuss

Universal Acceptance now on Wikipedia...https://en.wikipedia.org/wiki/Universal_Acceptance
by Don Hollander July 9, 2020

July 9, 2020

A nice way to end a fairly productive year. Plans coming up: There will be a Universal Acceptance gathering on Monday the 8th of January in Hong Kong with the Hong Kong IT Community. This is being organised by .asia, ISOC HK and UASG. If you’ve not yet received an invitation but will be in Hong Kong that afternoon, please let me know and we’ll organise one. 15:00 - 18:00 at the Sheraton. The UASG Coordination Group will be meeting on Tuesday the 9th of January and the morning of the 10th if necessary, also in Hong Kong. The agenda will be out next week. Full remote participation will be available if there’s interest. There will be a meeting of EAI operators on the 11th and 12th in Guangzhou, China, hosted by Coremail and CNNIC. If you are an EAI practitioner and would like to participate and have not otherwise registered, please let me know. I expect that we’ll have remote participation facilities. The UASG is expecting another UA Workshop on Day 0 of the ICANN meeting in Puerto Rico as well as a public update session during the week. Dates and venues still to be confirmed. Happy New Year to everyone. If you’re out celebrating, please get home safe. Don Don Hollander Universal Acceptance Steering Group www.uasg.tech don.hollander(a)icann.org Skype: don_hollander

12 17

Review of UASG018
by Don Hollander Jan. 8, 2019

Jan. 8, 2019

Please find attached a link to a proposed revision of UASG018. http://viagenie.ca/ua/UASG_Programming_Language_Framework_Review_v1.0%20-%2… Comments welcome, of course. Don Don Hollander Secretary General - UASG Skype: Don_Hollander

4 4

More from Ram Mohan on ICANN's further commitment to Universal Acceptance
by Don Hollander Jan. 2, 2019

Jan. 2, 2019

https://uasg.tech/2018/12/icann-further-commits-to-universal-acceptance-of-… Don Hollander Secretary General - UASG Skype: Don_Hollander

11 22

UASG Coordination Group - Face to Face Meeting
by Don Hollander Jan. 1, 2019

Jan. 1, 2019

FYI: The UASG is having a Face-to-Face Coordination Group meeting in Washington DC from January 7 to January 9th. The agenda and associated papers are currently being prepared. The meeting will consider a refresh of the group Strategic Plan particularly in light of the ICANN's Board inclusion of Universal Acceptance in its strategic agenda. Like all our meetings, we'll provide remote access. If you are thinking about attending in person, would you please let me know so that we can manage the logistics. Thanks. Don Don Hollander Secretary General - UASG Skype: Don_Hollander

3 2

Happy New Year
by Nitin Walia Dec. 31, 2018

Dec. 31, 2018

Warm Regards Nitin Walia नितिन वालिया Director निदेशक Data Xgen Technologies डाटा एक्सजेन टेक्नोलॉजीज Email: nitin(a)xgenplus.com नितिन(a)xn--v1bmv2ck2cxbe5k8bf.xn--h2brj9c Web: www.xgenplus.com एक्सजेनप्लस.भारत Mobile I whatsapp: +919828025000 Skype id - n_walia If you do not want to receive email in future , please click here to unsubscribe ! [XGENFOOTER] [-XGENFOOTER] Do not Remove: [HID]20181231175339462[-HID]

1 0

[FYI] Two IDN Homograph blog posts from Farsight Security
by Jim DeLaHunt Dec. 30, 2018

Dec. 30, 2018

Hello, UA friends: North America is in the midst of a holiday season right now, and I hope everyone on this list with holidays has been enjoying them — and that those without holidays right now get them soon. :-) I'd like to pass on links to two blog posts from Farsight Security about Internationalised Domain Name-based homograph attacks. I don't see that these were shared with this list when they appeared. I don't agree with everything in these blogs, but I do like to practice my ability to argue in favour of IDN use and against IND-based fear-mongering. These blogs are useful practice material. /Touched by an IDN: Farsight Security shines a light on the Internet's oft-ignored and undetected security problem / Wednesday, January 17, 2018 By Mike Schiffman(Farsight Security) <https://www.farsightsecurity.com/2018/01/17/mschiffm-touched_by_an_idn/> "Committed to making online interactions safer for all users, Farsight Security regularly investigates systemic threats to the Internet. The design and implementation of the DNS Internationalized Domain Name (IDN) <https://en.wikipedia.org/wiki/Internationalized_domain_name> system poses such a threat – one well known by DNS industry insiders and security professionals but not known or well understood by the wider public. The purpose of this research is to bridge that knowledge gap – to offer a keyhole glimpse into the shadowy world of brand lookalike abuse via IDN homographs. "Registration of confusing Internet DNS names for the purpose of misleading consumers is not news. Every user of the Internet learns – often the hard way – that much of the email they receive is forged, and many of the World Wide Web links they are prompted to click on are malicious. Yet IDN, a DNS standard representing non-English domain names, allows forgeries to be nearly undetectable by either human eyes or human judgement, or by traditional Internet user interface tools such as email clients and web browsers. "Using its real-time DNS network, Farsight Security conducted new research to determine the prevalence and reach of homographs <https://en.wikipedia.org/wiki/Homograph>, in the form of IDN lookalike domains, across the Internet. Specifically, Farsight examined 125 top brand domain names, including large content providers, social networking giants, financial websites, luxury brands, cryptocurrency exchanges and other popular websites. Our findings underscore that the potential security risk posed by IDN homographs is significant. Any ultimate defense against this variant of Internet forgery will rely on Internet governance and security automation. It is to inform the need for such solutions that we offer the findings below." /Free Airline Tickets: The Latest Internationalized Domain Name-based Homograph Scam/ Monday, August 13, 2018 By Mike Schiffman (Farsight Security) <https://www.farsightsecurity.com/2018/08/13/mschiffm-freeticketsscam/> "As part of our continuous monitoring of the Internationalized Domain Name (IDN) space, Farsight recently found evidence of what appears to be an ongoing IDN homograph-based phishing campaign targeting mobile users. The suspected phishing websites purport to be those of commercial airline carriers offering free tickets, but, instead, appear to subject the user to a bait-and-switch scam." I will also mention again Farsight Security's report on IDN Homograph attacks. This was discussed on this list (Subject: /Re: [UA-discuss] Once again/, Date: Wed, 27 Jun 2018 15:56:37 +0000 etc.) / Farsight Security Global Internationalized Domain Name Homograph Report, Q2/2018/ <https://info.farsightsecurity.com/farsight-idn-research-report> "IDN ReportInternationalized Domain Names (IDNs) enable a multilingual Internet. Using IDN standards and protocols, Internet-users are able to register and use domain names in scripts other than Basic Latin. Yet IDNs are often abused by cybercriminals to conduct malicious activities, such as phishing or malware distribution. In this new research report, "Farsight Security Global Internationalized Domain Name Homograph Report Q2/2018," Farsight Security examines the prevalence and distribution of IDN homographs across the Internet. We examined 100 Million IDN resolutions over a 12-month period with a focus on over 450 top global brands across 11 sectors including finance, retail, and technology." Best regards and happy new year, —Jim DeLaHunt, Vancouver, Canada -- --Jim DeLaHunt, jdlh(a)jdlh.com http://blog.jdlh.com/ (http://jdlh.com/) multilingual websites consultant 355-1027 Davie St, Vancouver BC V6E 4L2, Canada Canada mobile +1-604-376-8953

3 3

Re: [UA-discuss] More from Ram Mohan on ICANN's further commitment to Universal Acceptance
by John Levine Dec. 27, 2018

Dec. 27, 2018

> So I would support Andre argument for ICANN to adopt IDNs , walk the talk and become UA ready. I would suggest being careful what you ask for. ICANN's web site is in six languages, English, French, Spanish, Russian, Arabic, and Chinese. The French or Spanish version would be ICANN.ONG. Hey, look, it's registered with name servers at APNIC. Oh, bummer, lame delegation, DNS request return REFUSED. If you look up ICANN.NGO, which is automatically paired with ICANN.ONG, it's not lame, but points at a web server at RIPE which returns a default web page that says It Works! Regards, John Levine, john.levine(a)standcore.com Standcore LLC

2 2

Re: [UA-discuss] More from Ram Mohan on ICANN´s further commitment to Universal Acceptance
by Nitin Walia Dec. 21, 2018

Dec. 21, 2018

Its a great that ICANN is adding UA to the responsibilities of its Board IDN/UA Working Group . Warm Regards Nitin Walia नितिन वालिया Director निदेशक Data Xgen Technologies डाटा एक्सजेन टेक्नोलॉजीज Email: nitin(a)xgenplus.com नितिन(a)xn--v1bmv2ck2cxbe5k8bf.xn--h2brj9c Web: www.xgenplus.com एक्सजेनप्लस.भारत Mobile I whatsapp: +919828025000 Skype id - n_walia From: Don Hollander MailId : [87322442]To: "ua-discuss(a)icann.org" Subject: [UA-discuss] More from Ram Mohan on ICANN&acutes further commitment to Universal AcceptanceDate: 20 Dec 2018 02:39:22 PM https://uasg.tech/2018/12/icann-further-commits-to-universal-acceptance-of-… Don Hollander Secretary General &ndash UASG Skype: Don_Hollander Do not Remove:[HID]20181220143922742[-HID] [XGENFOOTER] [-XGENFOOTER]

1 0

Suggestion Email validation library to support IEA
by SUHAYB ALGHUTAYMIL Dec. 10, 2018

Dec. 10, 2018

Dear all, I have a suggestion to UASG that might help to improve IEA adoption in software applications like (web apps, mobile apps) Software developers nowadays depend on open source packages or libraries either to use it directly or use it as a reference to rewrite it in other programming languages. Some developers write their own regular expression(regex) to validate email which usually does not support IDN emails since a regex that supports IEA will be too complex and hard to write and debug. A standard library that has a function like validateEmail() eases the support for IEA in web and mobile apps development. I wish the UASG considers contacting open source software vendors like (Microsoft,php.net or openjdk.java.net .. etc.) to include email validation in their standard libraries or to sponsor an existing library to be the official email validation library and be the reference implementation for other software developers. With best regards, Suhayb Alghutaymil SaudiNIC

3 3

Re: [UA-discuss] Suggestion Email validation library to support IEA
by Dr Ajay Data Dec. 10, 2018

Dec. 10, 2018

Along with when John has shared, https://github.com/data-xgenplus/EmailAddressValidator This has sample JAVA code too.. Dr. Ajay DATA | Founder &amp CEO Get email id like अजय(a)xn--c2bd1gb.xn--h2brj9c in your own language,visit www.xgenplus.com From: SUHAYB ALGHUTAYMIL MailId : [87054723]To: UA-discuss Subject: [UA-discuss] Suggestion Email validation library to support IEADate: 09 Dec 2018 11:27:01 AM Dear all, I have a suggestion to UASG that might help to improve IEA adoption in software applications like (web apps, mobile apps) Software developers nowadays depend on open source packages or libraries either to use it directly or use it as a reference to rewrite it in other programming languages. Some developers write their own regular expression(regex) to validate email which usually does not support IDN emails since a regex that supports IEA will be too complex and hard to write and debug . A standard library that has a function like validateEmail() eases the support for IEA in web and mobile apps development . I wish the UASG considers contacting open source software vendors like (Microsoft,php.net or openjdk.java.net . etc.) to include email validation in their standard libraries or to sponsor an existing library to be the official email validation library and be the reference implementation for other software developers. With best regards, Suhayb Alghutaymil SaudiNIC Do not Remove:[HID]2018120911270183[-HID] [XGENFOOTER] [-XGENFOOTER]

1 0