February 2018 - UA-discuss

Universal Acceptance now on Wikipedia...https://en.wikipedia.org/wiki/Universal_Acceptance
by Don Hollander July 9, 2020

July 9, 2020

A nice way to end a fairly productive year. Plans coming up: There will be a Universal Acceptance gathering on Monday the 8th of January in Hong Kong with the Hong Kong IT Community. This is being organised by .asia, ISOC HK and UASG. If you’ve not yet received an invitation but will be in Hong Kong that afternoon, please let me know and we’ll organise one. 15:00 - 18:00 at the Sheraton. The UASG Coordination Group will be meeting on Tuesday the 9th of January and the morning of the 10th if necessary, also in Hong Kong. The agenda will be out next week. Full remote participation will be available if there’s interest. There will be a meeting of EAI operators on the 11th and 12th in Guangzhou, China, hosted by Coremail and CNNIC. If you are an EAI practitioner and would like to participate and have not otherwise registered, please let me know. I expect that we’ll have remote participation facilities. The UASG is expecting another UA Workshop on Day 0 of the ICANN meeting in Puerto Rico as well as a public update session during the week. Dates and venues still to be confirmed. Happy New Year to everyone. If you’re out celebrating, please get home safe. Don Don Hollander Universal Acceptance Steering Group www.uasg.tech don.hollander(a)icann.org Skype: don_hollander

12 17

IANA IDN Tables
by Andre Schappo Feb. 27, 2018

Feb. 27, 2018

It must be over a year since I last looked at the IANA IDN tables and they have grown massively in that time ➜ iana.org/domains/idn-tables<http://iana.org/domains/idn-tables> Some observations: I will use Verisignʼs Japanese .コム (transliteration of .com) There is .コム Japanese, which is LDH (ASCII Letters, Digits, Hyphen) + Hiragana + Katakana + a heap of Han There is .コム Hiragana, which is DH + Hiragana There is .コム Katakana, which is DH + Katakana There is .コム Han, which is DH + a heap of Han André Schappo

11 23

Another difficulty to overcome ...
by Ronald Geens Feb. 26, 2018

Feb. 26, 2018

All, I am aware of the good work going on in the UASG to get IDN at all levels natively supported in web-adresses and email and I fully support that. On the other hand there is darker side of the web that people want to be protected from. I just read this blog about some people that may actually find it better to see puny-code in stead of regular IDN in order to detect spam and phishing. https://ma.ttias.be/show-idn-punycode-firefox-avoid-phishing-urls/ which is an opposite view of what UASG is trying to achieve. Does/Will the UASG have a standpoint in this matter ? Is this in scope of UASG or will we rely on the anti-virus industry or even registrars/registries to protect the world from abuses like this ? Best regards, Ron Geens DNS Belgium

9 12

Re: [UA-discuss] [UA-EAI] Microsoft announcement of EAI in India
by Mark Svancarek Feb. 22, 2018

Feb. 22, 2018

Thanks, Ajay. We couldn’t have done it without you. From: UA-EAI <ua-eai-bounces(a)icann.org> On Behalf Of Dr Ajay Data Sent: Thursday, February 22, 2018 5:22 AM To: mark svancarek via ua-discuss <ua-discuss(a)icann.org>; `ua-eai@ <icann.org` ua-eai(a)icann.org>; `ua-comms-wg@ <icann.org` ua-comms-wg(a)icann.org> Subject: Re: [UA-EAI] [UA-discuss] Microsoft announcement of EAI in India Hello Mark This is great news and start of new exciting journey. Thank you for mentioning XgenPlus and UASG. That speaks a lot about the relationships you care. Thank you very much for that. We are moving towards some more large deployments and this announcement makes the life much more easier for all of us when downgrading is not required. Mark this deserves a cake cutting and celebration when we all are there. Looking forward to meet all of you, who is attending ICANN61. Thanks. Dr. Ajay DATA | Founder & CEO Get email id like अजय(a)xn--c2bd1gb.xn--h2brj9c<mailto:अजय@डाटा.भारत> in your own language, visit www.xgenplus.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.xgenplu…> ________________________________ From: Mark Svancarek via UA-discuss <ua-discuss(a)icann.org<mailto:ua-discuss@icann.org>> MailId : [78325907] To: "ua-eai(a)icann.org<mailto:ua-eai@icann.org>" <ua-eai(a)icann.org<mailto:ua-eai@icann.org>>,"ua-discuss(a)icann.org<mailto:ua-discuss@icann.org>" <ua-discuss(a)icann.org<mailto:ua-discuss@icann.org>>,"Ua-comms-wg(a)icann.org<mailto:Ua-comms-wg@icann.org>" <Ua-comms-wg(a)icann.org<mailto:Ua-comms-wg@icann.org>> Subject: [UA-discuss] Microsoft announcement of EAI in India Date: 22 Feb 2018 01:12:28 AM Today, International Mother Language Day<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fen.wikiped…>, we announced support for EAI in Office 365 and Outlook.com. We are focusing on Outlook and webmail for now, though we will follow up regarding other mail clients soon. Likewise we are focusing on Indian scripts now, because Microsoft India is taking the lead on this announcement. UASG is mentioned and a snippet of content from UASG-007 is used. Also, we make a callout to XGenPlus as a Microsoft partner and source of India script language mailboxes. We are expecting this to be well-received in India. I have listed some English-language uptake so far, below. Thanks to everyone in UASG and in these mailing lists who helped make this happen! /marksv Microsoft India News Center Meetul Patel, Microsoft India COO https://news.microsoft.com/en-in/features/email-addresses-indian-language-s…<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnews.micro…> Microsoft India blog Balendu Sharma, director of Localization and Accessibility at Microsoft India https://blogs.msdn.microsoft.com/msind/2018/02/21/enabling-email-addresses-…<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fblogs.msdn…> Microsoft India News Center marcom https://news.microsoft.com/en-in/microsoft-announces-wide-support-e-mail-ad…<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnews.micro…> Neowin https://www.neowin.net/news/microsoft-adds-support-for-email-addresses-in-1…<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.neowin…> BGR India www.bgr.in/news/microsoft-announces-indian-languages-support-for-email-addr…<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.bgr.in%…> Infotechlead http://www.infotechlead.com/software/microsoft-enables-email-addresses-15-i…<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.infotec…> YourStory ht tps://yourstory.com/2018/02/microsoft-to-support-e-mail-addresses-in-15-ind…<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fyourstory.…> Mobile Indian Network https://www.themobileindian.com/news/microsoft-announces-support-for-e-mail…<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.themob…> [https://data.in/XGenPlusMessageID:15193056995993886a-#RCPT#.jpg][http://dlr…]

1 0

Microsoft announcement of EAI in India
by Mark Svancarek Feb. 22, 2018

Feb. 22, 2018

Today, International Mother Language Day<https://en.wikipedia.org/wiki/International_Mother_Language_Day>, we announced support for EAI in Office 365 and Outlook.com. We are focusing on Outlook and webmail for now, though we will follow up regarding other mail clients soon. Likewise we are focusing on Indian scripts now, because Microsoft India is taking the lead on this announcement. UASG is mentioned and a snippet of content from UASG-007 is used. Also, we make a callout to XGenPlus as a Microsoft partner and source of India script language mailboxes. We are expecting this to be well-received in India. I have listed some English-language uptake so far, below. Thanks to everyone in UASG and in these mailing lists who helped make this happen! /marksv Microsoft India News Center Meetul Patel, Microsoft India COO https://news.microsoft.com/en-in/features/email-addresses-indian-language-s… Microsoft India blog Balendu Sharma, director of Localization and Accessibility at Microsoft India https://blogs.msdn.microsoft.com/msind/2018/02/21/enabling-email-addresses-… Microsoft India News Center marcom https://news.microsoft.com/en-in/microsoft-announces-wide-support-e-mail-ad… Neowin https://www.neowin.net/news/microsoft-adds-support-for-email-addresses-in-1… BGR India www.bgr.in/news/microsoft-announces-indian-languages-support-for-email-addr…<http://www.bgr.in/news/microsoft-announces-indian-languages-support-for-ema…> Infotechlead http://www.infotechlead.com/software/microsoft-enables-email-addresses-15-i… YourStory https://yourstory.com/2018/02/microsoft-to-support-e-mail-addresses-in-15-i… Mobile Indian Network https://www.themobileindian.com/news/microsoft-announces-support-for-e-mail…

3 2

Re: [UA-discuss] Microsoft announcement of EAI in India
by Dr Ajay Data Feb. 22, 2018

Feb. 22, 2018

Hello MarkThis is great news and start of new exciting journey. Thank you for mentioning XgenPlus and UASG. That speaks a lot about the relationships you care. Thank you very much for that. We are moving towards some more large deployments and this announcement makes the life much more easier for all of us when downgrading is not required. Mark this deserves a cake cutting and celebration when we all are there. Looking forward to meet all of you, who is attending ICANN61. Thanks. Dr. Ajay DATA | Founder &amp CEO Get email id like अजय(a)xn--c2bd1gb.xn--h2brj9c in your own language,visit www.xgenplus.com From: Mark Svancarek via UA-discuss MailId : [78325907]To: "ua-eai(a)icann.org" ,"ua-discuss(a)icann.org" ,"Ua-comms-wg(a)icann.org" Subject: [UA-discuss] Microsoft announcement of EAI in IndiaDate: 22 Feb 2018 01:12:28 AM Today, International Mother Language Day, we announced support for EAI in Office 365 and Outlook.com. We are focusing on Outlook and webmail for now, though we will follow up regarding other mail clients soon. Likewise we are focusing on Indian scripts now, because Microsoft India is taking the lead on this announcement . UASG is mentioned and a snippet of content from UASG-007 is used. Also, we make a callout to XGenPlus as a Microsoft partner and source of India script language mailboxes. We are expecting this to be well-received in India. I have listed some English-language uptake so far, below . Thanks to everyone in UASG and in these mailing lists who helped make this happen! /marksv Microsoft India News Center Meetul Patel, Microsoft India COO https://news.microsoft.com/en-in/features/email-addresses-indian-language-s… Microsoft India blog Balendu Sharma, director of Localization and Accessibility at Microsoft India https://blogs.msdn.microsoft.com/msind/2018/02/21/enabling-email-addresses-… Microsoft India News Center marcom https://news.microsoft.com/en-in/microsoft-announces-wide-support-e-mail-ad… Neowin https://www.neowin.net/news/microsoft-adds-support-for-email-addresses-in-1… BGR India www.bgr.in/news/microsoft-announces-indian-languages-support-for-email-addr… Infotechlead http://www.infotechlead.com/software/microsoft-enables-email-addresses-15-i… YourStory ht tps://yourstory.com/2018/02/microsoft-to-support-e-mail-addresses-in-15-ind… Mobile Indian Network https://www.themobileindian.com/news/microsoft-announces-support-for-e-mail…

1 0

Re: [UA-discuss] Microsoft announcement of EAI in India
by Tan Tanaka, Dennis Feb. 21, 2018

Feb. 21, 2018

Great to hear! Thanks for sharing Mark. -Dennis From: UA-discuss <ua-discuss-bounces(a)icann.org> on behalf of "UA-discuss(a)icann.org" <ua-discuss(a)icann.org> Reply-To: Mark Svancarek <marksv(a)microsoft.com> Date: Wednesday, February 21, 2018 at 2:42 PM To: "ua-eai(a)icann.org" <ua-eai(a)icann.org>, "UA-discuss(a)icann.org" <ua-discuss(a)icann.org>, "Ua-comms-wg(a)icann.org" <Ua-comms-wg(a)icann.org> Subject: [EXTERNAL] [UA-discuss] Microsoft announcement of EAI in India Today, International Mother Language Day<https://en.wikipedia.org/wiki/International_Mother_Language_Day>, we announced support for EAI in Office 365 and Outlook.com. We are focusing on Outlook and webmail for now, though we will follow up regarding other mail clients soon. Likewise we are focusing on Indian scripts now, because Microsoft India is taking the lead on this announcement. UASG is mentioned and a snippet of content from UASG-007 is used. Also, we make a callout to XGenPlus as a Microsoft partner and source of India script language mailboxes. We are expecting this to be well-received in India. I have listed some English-language uptake so far, below. Thanks to everyone in UASG and in these mailing lists who helped make this happen! /marksv Microsoft India News Center Meetul Patel, Microsoft India COO https://news.microsoft.com/en-in/features/email-addresses-indian-language-s… Microsoft India blog Balendu Sharma, director of Localization and Accessibility at Microsoft India https://blogs.msdn.microsoft.com/msind/2018/02/21/enabling-email-addresses-… Microsoft India News Center marcom https://news.microsoft.com/en-in/microsoft-announces-wide-support-e-mail-ad… Neowin https://www.neowin.net/news/microsoft-adds-support-for-email-addresses-in-1… BGR India www.bgr.in/news/microsoft-announces-indian-languages-support-for-email-addr…<http://www.bgr.in/news/microsoft-announces-indian-languages-support-for-ema…> Infotechlead http://www.infotechlead.com/software/microsoft-enables-email-addresses-15-i… YourStory https://yourstory.com/2018/02/microsoft-to-support-e-mail-addresses-in-15-i… Mobile Indian Network https://www.themobileindian.com/news/microsoft-announces-support-for-e-mail…

2 1

Re: [UA-discuss] UA-discuss Digest, Vol 38, Issue 11
by Harish Chowdhary Feb. 21, 2018

Feb. 21, 2018

+1Thanks,Harish Chowdhary,ISOC IETF FELLOWinSIG 2017 FELLOWwww.nixi.in | www.indiaig.in From: ua-discuss-request(a)icann.orgSent: Wed, 21 Feb 2018 17:30:13 GMT+0530To: ua-discuss(a)icann.orgSubject: UA-discuss Digest, Vol 38, Issue 11Send UA-discuss mailing list submissions to   ua-discuss(a)icann.orgTo subscribe or unsubscribe via the World Wide Web, visit   https://mm.icann.org/mailman/listinfo/ua-discussor, via email, send a message with subject or body 'help' to   ua-discuss-request(a)icann.orgYou can reach the person managing the list at   ua-discuss-owner(a)icann.orgWhen replying, please edit your Subject line so it is more specificthan "Re: Contents of UA-discuss digest..."Today's Topics:  1. Re: Another difficulty to overcome ... (Asmus Freytag)  2. Re: Another difficulty to overcome ... (Mark Svancarek)  3. Re: Another difficulty to overcome ... (Andrew Sullivan)  4. Re: Another difficulty to overcome ... (Andrew Sullivan)----------------------------------------------------------------------Message: 1Date: Tue, 20 Feb 2018 10:05:08 -0800From: Asmus Freytag <asmusf(a)ix.netcom.com>To: ua-discuss(a)icann.orgSubject: Re: [UA-discuss] Another difficulty to overcome ...Message-ID: <441b9b4f-3546-6acf-6d6e-e369286b3040(a)ix.netcom.com>Content-Type: text/plain; charset="utf-8"; Format="flowed"On 2/20/2018 12:54 AM, Jim DeLaHunt wrote:>> Multiple people have made the argument that having a browser show> A-labels ("punycode") instead of U-labels ("regular IDN") is desirable> as a way of fighting phishing.>> My rebuttal has three parts:>>  1. The underlying problem is that the registry (here, .com) permitted>     registration of a domain name which was confusable with another>     one. The right place to fight this kind of phishing with>     confusable ch aracters is at the domain registry level.>  2. Even if you could magically prevent all confusable 2nd-level>     domain name registrations, phishing would still be a problem.>     Fraudsters have many tools, confusable 2nd-level names is only one>     of them. There are also confusable names at the 4th or 5th levels>     (e.g. microsoft.com.innocuous.deceptive.com) and misleading links>     in message bodies, and so on.>  3. The people for whom A-labels instead of U-labels [are more>     readable] are a privileged set of latin-script reading Internet>     users. The second billion internet users will predominantly be>     people who read a different script than latin. U-labels are a>     requirement for them to have legible domain names for legitimate>     sites. A-labels mean they don't get domain names which they can>   &nbs p; read. And they deserve to be able to read their domain names and>     email addresses.>> This is an excellent audience for me to test my rebuttal. Is it> solid?? Can I improve it?>One edit above in []There's a fallacy that A-labels are less confusable. Even for users ofthe Latin script. In fact, they obscure the intended destination almostas badly as URL shortening does... Otherwise we could all just usehashes like those used in URL shortening - and I'm not sure I'd call thelatter a win for security.Finally, there are some nice spoofing methods specific to a-labels.A./>> Cheers,> ???? ?Jim DeLaHunt, Vancouver, Canada>> On 2018-02-19 23:36, Ronald Geens wrote:>> All,>>>> ? ?I am aware of the good work going on in the UASG to get IDN at all>> levels natively supported in web-adresses and email and I fully>> support that.>>>> On the other hand there is darker side of the web that people wan t to>> be protected from.>> I just read this blog about some people that may actually find it>> better to see puny-code in stead of regular IDN in order to detect>> spam and phishing.>> https://ma.ttias.be/show-idn-punycode-firefox-avoid-phishing-urls/?which&gt… is an opposite view of what UASG is trying to achieve.>>>> ? ?Does/Will the UASG have a standpoint in this matter ? Is this in>> scope of UASG or will we rely on the anti-virus industry or even>> registrars/registries to protect the world from abuses like this ?>>>> Best regards,>>>> Ron Geens>> DNS Belgium>> -->      --Jim DeLaHunt,jdlh(a)jdlh.com      http://blog.jdlh.com/  (http://jdlh.com/)>        multilingual websites consultant>>        355-1027 Davie St, Vancouver BC V6E 4L2, Canada>           Canada mobile +1-604 -376-8953-------------- next part --------------An HTML attachment was scrubbed...URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20180220/74b05f41/attachment-0001.html>------------------------------Message: 2Date: Tue, 20 Feb 2018 18:08:25 +0000From: Mark Svancarek <marksv(a)microsoft.com>To: Chaals McCathie Nevile <chaals(a)yandex.ru>, "ua-discuss@icann.org"   <ua-discuss@icann.org>Subject: Re: [UA-discuss] Another difficulty to overcome ...Message-ID:   <BL0PR2101MB08838933734E2C5FA1474E96D1CF0@BL0PR2101MB0883.namprd21.prod.outlook.com>   Content-Type: text/plain; charset="utf-8"I like Jim's rebuttal in entirety, but would re-order 123 --> 321 per Chaals comments.-----Original Message-----From: UA-discuss <ua-discuss-bounces(a)icann.org> On Behalf Of Chaals McCathie NevileSent: Tuesday, February 20, 2018 1:41 AMTo: ua-discuss(a)icann.orgSubject: Re: [UA-discuss] Another difficulty to overcome ...The strongest argument against showing A-labels is the technical side of point 3, and IMHO it is sufficient to make the case. Point 2 is a true statement but doesn't address the problem. Point 1 is about what else should be done to address the problem, but does not directly rebut the suggestion.In more detail, (for anyone in this choir who wants the full sermon ;) )People who more naturally read a non-latin script - the primary market for non-latin script - are generally more able to read that accurately and less able to spot oddities in latin script or another script they don't read.This isn't a question of "deserving" to be allowed to use your own script (although it is true people do deserve that IMHO).It is about ensuring that people can effectively notice whether something is a meaningful URL they were looking for, or a corrupted version. It is easier for most people in their own script than noticing a corrupted version of a punyc ode string.This is also generally true for e.g. Europeans who do read Latin script.  Dahlstr?m, Dahlstrom, and Dahlstr?m *are* similar, and could be used for phishing attacks (one of them is part of a friend's email address). but xn--ksjdlfn and xn--sekdrtb are actually gibberish, and spotting whether gibberish has a mistake is pretty difficult for normal people.A better idea might be larger fonts, to make differences clearer.On user demand, offering a strict non-ambiguous *transliteration* could help (whether that is from or to a script such as Latin, or doesn't involve it at all as between say Thai and Arabic). But transliteration introduces some thorny and well-known problems. I hope that is the reason it isn't widely available, rather than just because a bunch of engineers assume everything begins with Latin script anyway...cheerscheers.On Tue, 20 Feb 2018 09:54:40 +0100, Jim DeLaHunt <jfrom.uasg@jdlh.com>wrote:>   Multiple people have made the arg ument that having a browser show>      A-labels ("punycode") instead of U-labels ("regular IDN") is>      desirable as a way of fighting phishing.>>   My rebuttal has three parts:>>>       1. The underlying problem is that the registry (here, .com)>        permitted registration of a domain name which was confusable>        with another one. The right place to fight this kind of phishing>        with confusable characters is at the domain registry level.>>     2. Even if you could magically prevent all confusable 2nd-level>        domain name registrations, phishing would still be a problem.>        Fraudsters have many tools, confusable 2nd-level names is only>        one of them. There are also confusable names at the 4th or 5th>        levels (e.g. microsoft.com.innocuous.deceptive.com) and>        misleading links in message bodies, and so on.>>         3. The people for whom A-labels instead of U-labels are a>        privileged set of latin-script reading Internet users. The>        second billion internet users will predominantly be people who>        read a different script than latin. U-labels are a requirement>        for them to have legible domain names for legitimate sites.>        A-labels mean they don't get domain names which they can read.>        And they deserve to be able to read their domain names and email>        addresses.>   This is an excellent audience for me to test my rebuttal. Is it>      solid?  Can I improve it?   Cheers ,>>           ?Jim DeLaHunt, Vancouver, Canada>>     On 2018-02-19 23:36, Ronald Geens>      wrote:>>>>>>          All,>>               I am aware of the good work going on in the UASG>>        to get IDN at all levels natively supported in web-adresses and>>        email and I fully support that.>>             On the other hand there is darker side of the web>>        that people want to be protected from.>>     I just read this blog about some people that may>>        actually find it better to see puny-code in stead of regular IDN>>        in order to detect spam and phishing.>>>>    >> https://na01.safelinks.protection.outlook .com/?url=https%3A%2F%2Fma.t>> tias.be%2Fshow-idn-punycode-firefox-avoid-phishing-urls%2F&data=04%7C>> 01%7Cmarksv%40microsoft.com%7Cf1f66762f22b4b0f20b908d578460c54%7C72f9>> 88bf86f141af91ab2d7cd011db47%7C1%7C1%7C636547164644768767%7CUnknown%7>> CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3>> D%3D%7C-1&sdata=5EXp%2Fkh8hb8Qzm24y8yPWeKJ3lLE28FzIv7CHvX2C4E%3D&rese>> rved=0>> which>>        is an opposite view of what UASG is trying to achieve.>>>>               Does/Will the UASG have a standpoint in this>>        matter ? Is this in scope of UASG or will we rely on the>>        anti-virus industry or even registrars/registries to protect the>>        world from abuses like this ?>>>>             Best regards,>>& gt;>             Ron Geens>>>>     DNS Belgium>>>>>>     --   --Jim DeLaHunt, jdlh(a)jdlh.com     https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fblog.jdlh.c…  > (https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fjdlh.com%2F…     &nb sp;multilingual websites consultant>>      355-1027 Davie St, Vancouver BC V6E 4L2, Canada>         Canada mobile +1-604-376-8953>>--Chaals is Charles McCathie Nevilefind more at https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fyandex.com&…: 3Date: Tue, 20 Feb 2018 13:18:44 -0500From: Andrew Sullivan <ajs(a)anvilwalrusden.com>To: ua-discuss(a)icann.orgSubject: Re: [UA-discuss] Another difficulty to overcome ...Message-ID: <20180220181844.qamd4mz5t6fx5pgz(a)mx4.yitter.info>Content-Type: text/plain; charset=us-asciiHi,On Tue, Feb 20, 2018 at 12:54:40AM -0800, Jim DeLaHunt wrote:&gt ;>  1. The underlying problem is that the registry (here, .com) permitted>     registration of a domain name which was confusable with another one. The>     right place to fight this kind of phishing with confusable characters is at>     the domain registry level.I sort of agree with that, but I want to note some cautions.   1.  It is not possible as a general matter to ensure that nothing   "confusable" ever gets registered.  We have no control over the   fonts people are using, or the visual acuity of people, or the   context in which the label is presented.  All of those have a   great deal to do with whether people get phished, quite apart from   the content of the labels.   2.  The "no-script-mixing" rules that many of us are arguing for   are also drags on innovation, and i n some locales there are good   reasons to mix scripts.  That tension won't go away just because   we said so.   3.  The distinction between identifiers and branding appears to be   almost totally lost on people, with even the Unicode Technical   Committee, who recommend against emojis in identifiers, saying   that they're ok in domain names (contrary to the IDNA2008   specifications).  I don't have any idea what to do about this,   because most people don't understand how context-free and   locale-free identifiers could possibly work reliably.  (That   includes me.)   4.  There is no way to make rules for the entire DNS, because it   is a distributed datbase with distributed authority.More generally, however, the position, "Use the A-label form" is ineffe ct the position, "Don't use IDNA."  For the most conspicuous factabout A-labels is that they're equivalently meaningless to everyone.That hardly seems like a usability win.>  3. The people for whom A-labels instead of U-labelsThere is nobody for whom A-labels are useful.  A-labels are thosethings that have the prefix (xn--) and a punycode-encoded string inthem.  'anvilwalrusden.com' has two labels, neither of which is anA-label, though they're both LDH-labels.  This is covered in painfuldetail in RFC 5890, so I refer the gentle reader to that.Best regards,A--Andrew Sullivanajs(a)anvilwalrusden.com------------------------------Message: 4Date: Tue, 20 Feb 2018 13:23:42 -0500From: Andrew Sullivan <ajs(a)anvilwalrusden.com>To: ua-discuss(a)icann.orgSubject: Re: [UA-discuss] Another difficulty to overcome ...Message-ID: <20180220182342.6z75tmq4736dd4dq(a)mx4.yitter.info>Content-Type: text/plain; charset=us-asciiOn Tue, Feb 20, 2018 at 10:40:31AM +0100, Chaals McCathie Nevile wrote:>> People who more naturally read a non-latin script - the primary> market for non-latin script - are generally more able to read that> accurately and less able to spot oddities in latin script or another> script they don't read.This is only partly relevant, because even an ASCII label can causetrouble.  If you doubt this, and you use an Apple product, I suggestthat you try to transcribe a string in the default font in either iOSor OSX (Keychain Access) where the string contains exactly one ofcapital I, lower-case L, capital O, or the digit zero.  There arecertainly similar cases with composed Latin characters, and there areseveral well-worked-over examples in Arabic script -- the latter wherecharacters that are all but guaranteed to use the same glyph arenevertheless different characters.> It is about ensuring that people can effectively notice whether> something is a meaningful URL they were looking for, or a corrupted> version. It is easier for most people in their own script than> noticing a corrupted version of a punycode string.The basic problem here is that domain names were a _lousy_ basis onwhich to build security policies, but we did it.  (That sort of thinghappens all the time.  The automobile was a lousy basis around whichto do social planning, but every North American city of any size showsthat we did that, too.  We shape our tools and thereafter they shapeus.)Best regards,A--Andrew Sullivanajs(a)anvilwalrusden.com------------------------------Subject: Digest Footer_______________________________________________UA-discuss mailing listUA-discuss@icann.orghttps://mm.icann.org/mailman/listinfo/ua-discuss------------------------------End of UA-discuss Digest, Vol 38, Issue 11****************************************** ------------------------------------------------------------------------------------------------------------------------------- [NIXI is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/nixiindia & Twitter: @inregistry ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. -------------------------------------------------------------------------------------------------

1 0

UA Ambassadors
by Don Hollander Feb. 20, 2018

Feb. 20, 2018

UA Ambassadors In January 2018, the UASG Coordination Group created the role of UA Ambassador - well respected, articulate, industry leaders, who will be encouraged and supported to raise the issues of UA and EAI within their respective spheres to our target audience of developers and CIOs. Here's the list of this month's appointments: Ashish Modi - Appointed February 2018 [cid:image002.jpg@01D3AA0A.B557A050]Based in Jaipur, India, Ashish is the Country Head for Corporate Affairs for Xgen Technologies, one of the leading players in the nascent EAI industry. Elaine Pruis - Appointed February 2018 [cid:image004.jpg@01D3AA0A.B557A050]Based in rural Washington state in the USA, Elaine is the Managing Director for Sage Data Science, a consulting company that provides a range of services, from data analytics to strategic business development, to its customers. Elaine has had extensive experience in the international Internet industry having worked for Donuts, MMX, and CoCCA in senior roles. [cid:image006.png@01D3AA0A.B557A050]Dusan Stojicevic - Appointed February 2018 Serbian based, Dusan has had many years involvement in the local and regional Internet community. He's a strong advocate for people being able to use their native language and native script with domain names and email addresses. Dusan is a popular speaker in Eastern European internet events.

5 4

HTML now allows EAI in address validation
by Chaals McCathie Nevile Feb. 19, 2018

Feb. 19, 2018

I landed the change [1] in the last Working Draft earlier this month: https://www.w3.org/TR/2018/WD-html53-20180206/ (But I forgot to say so here) The key bit is [[[ A valid e-mail address is defined in [[!RFC6531]]. A user agent should present and consume unicode text in the user interface, and expose it to other applications, except when sending to a Mail Transfer Agent that does not support SMPTUTF8 [[RFC6531]]. ]]] - https://w3c.github.io/html/sec-forms.html#valid-e-mail-address Thanks to all those who helped make this happen. Review is still appreciated - the timeline is to freeze this draft for a W3C Recommendation in early May, so before then is a good time to provide it. We will also be looking for implementation information - basically applications, sites, etc that work with EAI addresses, so pointers are welcome. [1] https://github.com/w3c/html/commit/873ec12901a1abcd0548c1a3230beadf84c79895 cheers Chaals -- Chaals is Charles McCathie Nevile find more at http://yandex.com

1 0