Re: [xri] Homographic attacks

[Peter C Davis <peter.davis@neustar.biz>]

On Monday 21 February 2005 10:43 pm, Drummond Reed wrote:
> -----Original Message-----
> From: Glenn Fleishman [mailto:glenn@glennf.com]
> Sent: Monday, February 21, 2005 6:28 PM
> To: Drummond Reed
> Cc: 'Dave McAlpin'; xri@lists.oasis-open.org; 'Adam C. Engst'
> Subject: RE: [xri] Homographic attacks
>
>
> This is definitely -- and no offense to the coiners -- too mild. I would
> argue
> that the registries should be required to check against a homographic
> database
> to prevent obvious spoofing.

while at a practical level, i'd agree that strengthening drummonds text would 
compell implementers to carefully construct precautions, neither the XRI TC, 
nor the implementers can possibly conceive of all possible semantic attacks 
of this sort.  registries will run, quickly, from the administration of 
XRI's, should they be obligated to 'enforce' such policies against an 
infinite number of attack vectors.

--- peterd