X
Tap here to go to the mobile version of the site.

Support Forum

When will a fix be available for Firefox 53.0 against "Punycode"

Posted

When will a fix be available for Firefox 53.0 against "Punycode"?

When will a fix be available for Firefox 53.0 against "Punycode"?
Happy112 561 solutions 5694 answers

Hi   !
This may not be the answer you're looking for, but you can force Firefox to show punycode when it is used :
Type in the adress bar   about:config (promise to be careful, if asked) Type and look for the preference : network.IDN_show_punycode and set it's value to   true

Hi &nbsp; !<BR> This may not be the answer you're looking for, but you can force Firefox to show punycode when it is used :<BR> Type in the adress bar &nbsp; '''about:config''' (promise to be careful, if asked) Type and look for the preference : '''network.IDN_show_punycode''' and set it's value to &nbsp; '''true'''
John99 971 solutions 13138 answers

I am not sure it is likely to be the sort of problem that can be easily fixed in Firefox itself.

I am not certain exactly what problem you are asking about. This is a rather complicated issue. I note Google recently awarded a modest bounty to someone for one report of an issue with punycode. If you are worried and wish to check a specific site Happy112's answer may help you do that.

We have had a few bugs open historically. The following bug is currently reopened, but it is probably not appropriate to comment unless you are able to add completely new and appropriate information:

This is a recently updated article you may be interested in

  • https://wiki.mozilla.org/IDN_Display_Algorithm
    This page explains how Firefox decides whether to display a given IDN label (a domain name is made up of one or more labels, separated by dots) in its Unicode (i.e. normal) or Punycode (i.e. gobbledigook) form.
    Implementing this plan was covered by bug 722299. ...
I am not sure it is likely to be the sort of problem that can be easily fixed in Firefox itself. I am not certain exactly what problem you are asking about. This is a rather complicated issue. I note Google recently awarded a modest bounty to someone for one report of an issue with punycode. If you are worried and wish to check a specific site Happy112's answer may help you do that. We have had a few bugs open historically. The following bug is currently reopened, but it is probably not appropriate to comment unless you are able to add completely new and appropriate information: * Bug 1332714 - IDN Phishing using whole-script confusables on Windows and Linux ** https://bugzilla.mozilla.org/page.cgi?id=etiquette.html '''This is a recently updated article you may be interested in''' * '''https://wiki.mozilla.org/IDN_Display_Algorithm''' <blockquote>This page explains how Firefox decides whether to display a given IDN label (a domain name is made up of one or more labels, separated by dots) in its Unicode (i.e. normal) or Punycode (i.e. gobbledigook) form. <br>Implementing this plan was covered by bug 722299. ...</blockquote>