Message 279920 - Python tracker

➜

This issue tracker has been migrated to GitHub , and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

In-reply-to
Author	christian.heimes
Recipients	abracadaber, christian.heimes, yselivanov
Date	2016年11月02日.11:02:27
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1478084548.13.0.957140607991.issue28414@psf.upfronthosting.co.za>

Content
It's a big, complicated mess. I can't implement IDN support correctly because Python lacks UTS#46 and IDNA2008 support. I just found out that IDNA 2008 is not enough because it does not provide a case mapping. Lack of case mapping broke my fix for curl CVE-2016-8625. At the moment IDN support is broken in a sane way: it just doesn't work and fails. A partial fix will introduce security issues. http://unicode.org/reports/tr46/#Processing lists "www.sparkasse-gießen.de" as a critical example. It's the domain of a German savings and loan bank.

Content

It's a big, complicated mess. I can't implement IDN support correctly because Python lacks UTS#46 and IDNA2008 support. I just found out that IDNA 2008 is not enough because it does not provide a case mapping. Lack of case mapping broke my fix for curl CVE-2016-8625.
At the moment IDN support is broken in a sane way: it just doesn't work and fails.
A partial fix will introduce security issues. http://unicode.org/reports/tr46/#Processing lists "www.sparkasse-gießen.de" as a critical example. It's the domain of a German savings and loan bank.

History
Date	User	Action	Args
2016年11月02日 11:02:28	christian.heimes	set	recipients: + christian.heimes, yselivanov, abracadaber
2016年11月02日 11:02:28	christian.heimes	set	messageid: <1478084548.13.0.957140607991.issue28414@psf.upfronthosting.co.za>
2016年11月02日 11:02:28	christian.heimes	link	issue28414 messages
2016年11月02日 11:02:27	christian.heimes	create

homepage