They need to up their game to cover internationalized homograph vulnerabilities, using roughly similar characters from different international alphabets to create totally different domain names:
I do have a tendency to check where the link leads before clicking on it, so the difference between those two is quite obvious to me: http://example.com/ vs http://xn--exmple-4nf.com/, but a lot of people probably do not do that.
Kemming is 100 level preparedness.
They need to up their game to cover internationalized homograph vulnerabilities, using roughly similar characters from different international alphabets to create totally different domain names:
example.com
exаmple.com
They look identical but are entirely different.
https://en.wikipedia.org/wiki/IDN_homograph_attack
They "a"s don’t look identical at all with a good font like Atkinson Hyperlegible Next, which also very clearly differentiates between
etc…
Well that’s just rude
I do have a tendency to check where the link leads before clicking on it, so the difference between those two is quite obvious to me:
http://example.com/vshttp://xn--exmple-4nf.com/, but a lot of people probably do not do that.I would definitely not click on the second one.