Slashdot Mirror


Russia Weighs Going Cyrillic For DNS

An anonymous reader writes "The Guardian reports that the Kremlin may start an alternate top-level domain, .rf. According to the story, .ru in Cyrillic translates to .py, the top-level domain for Paraguay, which the Russian government claims leads to confusion. This is similar to a move by China, which has their own .net and .com top-level domains in their native character set along with .cn, .com, and .net in ASCII." Hindering Paraguayan hackers may matter less to the Russian government than establishing greater control over a walled-off Internet.

2 of 223 comments (clear)

  1. Re:Great!!! by Sigismundo · · Score: 5, Interesting

    Not sure why the parent has been modded flamebait. It's probably the phrase "alien Latin-English characters", but it's actually an accurate description of how a domain name might appear to speakers of non-European languages.

    I wasn't aware that China had already began experimenting with Chinese characters in domain names, so I did some Googling. Here is a link (in English) that describes how to register a Chinese Domain Name (CDN). It makes for a pretty interesting read. It includes the predictable clause that you can't register CDNs that "harm the glory of the state." Users of CDNs are encouraged to use "Official Client-end CDN Software" to make access more convenient. I wonder exactly what this does.

    In general I think it's pretty cool to be able to have non-ASCII characters in domain names, but it seems to introduce a lot of extra compexity into DNS. Also, it seems like it could open the door for more governmental control of the internet, as TFA mentions.

  2. Re:Great!!! by Maimun · · Score: 4, Interesting

    No, the characters only look the same to a human eye. To a computer they would look quite different:
    This is precisely why Cyrillic symbols are not used in DNS. It is possible to have two URLs, one having latin letters only, the other one latin and cyrillic, that look exactly the same in most fonts but are completely different as strings, so if they are resolved by DNS they'd resolve to distinct IP addresses. This is just perfect for phishing attacks: you can't tell whether www.mybank.com is the URL of your bank "MyBank", or it has a Cyrillic "a" and is registered by the attacker, by simply lookong at it. To tell if the URL is genuine one must examine it with hex editor ro something...