Daniel Stenberg in gmane.comp.web.curl.library (Wed, 2 Nov 2016 10:30:45
+0100 (CET)):
>On Wed, 2 Nov 2016, Simon Josefsson wrote:
>
>>> Based on this, I suppose my recommendation is that people simply switch off
>>> IDN support in curl builds until further notice to stay safe. The old way
>>> was open for trickery and the new way is incomplete.
>>
>> What trickery are you referring to?
>
>IDNA 2003 makes us use the wrong host for .de host names using ß:
>
> https://curl.haxx.se/docs/adv_20161102K.html

Any idea what libicu is doing? It seems to have both IDNA2003 and
IDNA2008 support.

-- 
Jan
-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:  https://curl.haxx.se/mail/etiquette.html