Maintained by: NLnet Labs

unicode request blocking

Benny Pedersen
Sat Apr 22 00:00:23 CEST 2017


Joris L. via Unbound-users skrev den 2017-04-21 18:48:

> Is there a documented way to block unicode domain names ( all of them,
> not some ) ?

ask the nic registra for this idn domain, if idn decode only come back 
with 7bit its not need to be encoded in idn

all other ways to solve it it will break idn and unicode

> Why ? Because http://xn--80ak6aa92e.com/ reads like apple.com in
> anything outside of Internet Explore. Firefox has a puny flag which
> can be set so the domain does no longer get displayed as apple.com but
> Chrome is pending an update to fix this issue.

latest browsers is not always better

if it have anything to do with unbound, it could be solve if idn domain 
decode turns up with 7bit only results, then lie to the query with 
domain not found

but its a nic registra issue, not a dns issue in any dns server