Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: non-latin TLD to be issued - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
non-latin TLD to be issued

Top-level domains are taking a new turn today with ICANN announcing the new TLDs using non-Latin characters. For example Egypt: مصر (Egypt).  It will be interesting to see how this will be used. I wouldn't know where to begin typing مصر on my keyboard so I would have to rely on links to get me to some sites. As we know clicking links blindly on the internet is always a great idea, especially in emails.  for the announcement click here ;-)  (http://www.icann.org/en/announcements/announcement-05may10-en.htm). 

Cheers

Mark 

 

Mark

391 Posts
ISC Handler
It will be interesting to see if these new TLD's break stuff like AV and exploit scanners, firewalls, or other security products. Any that don't support unicode or have programming issues might choke. If they do these may become new hot TLD's for malware hosting.
Skuld

7 Posts
Does anyone know of links to sites in these new TLDs that could be used for testing such products? My computer is set up so that I can type Arabic & Russian, but ووو.مصر, e.g., doesn't resolve, at least not according to our corporate web proxy -- one of those devices that needs testing.
Hal

50 Posts
So how do I paste this مصر into DIG?
Hal
7 Posts
Well, that was interesting. Obviously the way handlers enter unicode text differs from the way the comments work.
Hal

50 Posts
Found a fully non-latin domain linked in this article about the subject: www.globalbydesign.com/blog/2010/05/06/the-dawn-of-a-new-url/. Not trying to post the URL itself here since we've already learned that doesn't work. The Arabic FQDN for an Egyptian site appears in my address bar as xn--4gbrim.xn----rmckbbajlc6dj7bxne2c.xn--wgbh1c after the page appears. Interesting... I'll have to read more about how this is implemented. Is that something that I could put into Dan's Guardian, e.g., to block a site?
Hal

50 Posts
Here is a url using the new TLD in a pastebin since I don't think the comments like unicode. It is the same domain as that listed int he comment above me but this is the Arabic form of the URL. I can already say wepawet doesn't like it.
Skuld

7 Posts
Forgot the link: http://pastebin.com/NgMSPfLi
Skuld

7 Posts
Do a google search on "Punycode" to find the specs on how this is implemented.
Eric

43 Posts

Sign Up for Free or Log In to start participating in the conversation!