Re: Support of kepler, sputnik, etc and security risks

[Florian Weimer <fw@...>]

* David Given:

> Interestingly, after posting my message I tried resolving the
> addresses; and it turns out that www.google.com and www.𝐠𝐨𝐨𝐠𝐥𝐞.com
> both appear to resolve to the same address... as does
> www.google.𝐜𝐨𝐦. (Using the bold versions of the characters here to
> make them visible --- these are all from U+1D400 MATHEMATICAL BOLD.)
> So it certainly looks like something is remapping at least some
> letter-like glyphs to actual ASCII. I don't know whether that's my
> Linux system or part of DNS.

It's part of IDNA normalization implemented in the application/browser
(it's called Nameprep IIRC).