New Opera Forums launching soon!
Discussion thread

Can Opera be made to show punycode?

concretable
concretable

264 posts

    There is an exploit that can spoof trusted sites to make the domains look like the real ones when they are not. Showing punycode shows them up as not real. Opera is susceptible to that exploit. Is there any way to force Opera to show punycode?

    See this page for an explanation:
    https://www.wordfence.com/blog/2017/04/chrome-firefox-unicode-phishing/

    7 Replies - 560 Views

    sgunhouse
    0 0
    sgunhouse

    3871 posts

    • Moderator
    • Server monkey
    • 2000 posts

    If you click on the "lock" icon you'll see the difference. Would be nice to have something more obvious ...

    concretable
    0 0
    concretable

    264 posts

      It sure would be nice. How many people are going to think to click on the lock (or the world globe or turbo icon) to check for a fake site?

      szorstki
      0 0
      szorstki

      2 posts

      • Server monkey

      Clicking a lock is definitely not a secure solution for punycode phishing :/ Opera should make something better to warn users.

      sgunhouse
      0 0
      sgunhouse

      3871 posts

      • Moderator
      • Server monkey
      • 2000 posts

      Old Opera (12 and earlier) did, I suppose they're stuck with whatever Chromium supports in current versions.

      concretable
      0 0
      concretable

      264 posts

        They added a little something extra to enhance privacy for the users. Why could they not add something more to show punycode?

        shintoplasm01
        0 0
        shintoplasm01

        5 posts

          This has now been fixed in the latest Stable (and Beta) versions: https://www.opera.com/blogs/desktop/2017/04/opera-stable-44-0-2510-1449-update/

          concretable
          0 0
          concretable

          264 posts

            Thanks for notifying me.