<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>Thanks Dennis.</div><div><br></div><div>Interest that the article also attempts to answer the question, “Why” - and attributes some of the low numbers to the way that browsers display the name – in full punycode form.</div><div><br></div><div>I wonder if policies at the registry level have had any impact? </div><div><br></div><div>Don</div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Dennis Tan <<a href="mailto:dtantanaka@verisign.com">dtantanaka@verisign.com</a>><br><span style="font-weight:bold">Date: </span> Thursday, 28 May 2015 5:17 am<br><span style="font-weight:bold">To: </span> "<a href="mailto:c.dillon@ucl.ac.uk">c.dillon@ucl.ac.uk</a>" <<a href="mailto:c.dillon@ucl.ac.uk">c.dillon@ucl.ac.uk</a>>, "<a href="mailto:ua-international@icann.org">ua-international@icann.org</a>" <<a href="mailto:ua-international@icann.org">ua-international@icann.org</a>>, "<a href="mailto:UA-discuss@icann.org">UA-discuss@icann.org</a>" <<a href="mailto:UA-discuss@icann.org">UA-discuss@icann.org</a>><br><span style="font-weight:bold">Subject: </span> [UA-International] IDNs and homographs attacks<br></div><div><br></div><div xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="Generator" content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Century Gothic";
panose-1:2 11 5 2 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
h5
{mso-style-priority:9;
mso-style-link:"Heading 5 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.Heading5Char
{mso-style-name:"Heading 5 Char";
mso-style-priority:9;
mso-style-link:"Heading 5";
font-family:"Cambria","serif";
color:#243F60;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#0F243E;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#0F243E;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Century Gothic","sans-serif";
color:windowtext;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#0F243E;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div lang="EN-US" link="blue" vlink="purple"><div class="WordSection1"><p class="MsoNormal"><span style="color:#0F243E">ICYMI: the APWG released its Global Phishing Survey 2H2014. In it they state “From January 2007 to June 2014 we found only nine true homographic phishing attacks. […] One hundred and three IDN domain names were
used for phishing in 2H2014. None were homographic attacks.”<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E"><o:p> </o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">Clearly, those claiming to watch out for IDNs for spoofing attacks are overstating the problem.<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E"><o:p> </o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">Link to the article and survey: <a href="http://www.circleid.com/posts/20150527_phishing_in_the_new_gtlds/">
http://www.circleid.com/posts/20150527_phishing_in_the_new_gtlds/</a><b><o:p></o:p></b></span></p><p class="MsoNormal"><b><span style="color:#0F243E"><o:p> </o:p></span></b></p><p class="MsoNormal"><span style="color:#0F243E"><o:p> </o:p></span></p><div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;"> Dillon, Chris [<a href="mailto:c.dillon@ucl.ac.uk">mailto:c.dillon@ucl.ac.uk</a>]
<br><b>Sent:</b> Tuesday, May 26, 2015 10:11 AM<br><b>To:</b> Tan Tanaka, Dennis<br><b>Cc:</b> <a href="mailto:ua-international@icann.org">ua-international@icann.org</a><br><b>Subject:</b> RE: Meeting notes group call 5/26<o:p></o:p></span></p></div></div><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;">Dear colleagues,<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;">I’ve checked the GoDaddy article I mentioned. Actually it’s a general article about the small number of law enforcement cases, disputes etc., rather than just IDNs:<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;"><a href="http://www.ionmag.asia/2015/02/the-right-rights-balance">www.ionmag.asia/2015/02/the-right-rights-balance</a><o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;">Regards,<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;">Chris.<o:p></o:p></span></p><div><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;">--<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;">Research Associate in Linguistic Computing, Centre for Digital Humanities, UCL, Gower St, London WC1E 6BT Tel +44 20 7679 1599 (int 31599)
<a href="http://www.ucl.ac.uk/dis/people/chrisdillon"><span style="color:#0563C1">www.ucl.ac.uk/dis/people/chrisdillon</span></a><o:p></o:p></span></p></div><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'Century Gothic', sans-serif;"><o:p> </o:p></span></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b>From:</b> <a href="mailto:ua-international-bounces@icann.org">
ua-international-bounces@icann.org</a> [<a href="mailto:ua-international-bounces@icann.org">mailto:ua-international-bounces@icann.org</a>]
<b>On Behalf Of </b>Tan Tanaka, Dennis<br><b>Sent:</b> 26 May 2015 15:02<br><b>To:</b> <a href="mailto:ua-international@icann.org">ua-international@icann.org</a><br><b>Subject:</b> [UA-International] Meeting notes group call 5/26<o:p></o:p></p></div></div><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><span style="color:#0F243E">Attendees: <o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">- Chris Dillon<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">- Dusan<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">- Don<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">- Dennis<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E"><o:p> </o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">Notes:<o:p></o:p></span></p><p class="MsoListParagraph" style="text-indent:-.25in"><span style="color:#0F243E">1.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Re-cap i18n charter: no comments<o:p></o:p></span></p><p class="MsoListParagraph" style="text-indent:-.25in"><span style="color:#0F243E">2.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Review of DRAFT working plan:<o:p></o:p></span></p><p class="MsoListParagraph" style="margin-left:1.0in;text-indent:-.25in"><span style="color:#0F243E">a.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Change title of “telling” to “identifying” on work stream titles<o:p></o:p></span></p><p class="MsoListParagraph" style="margin-left:1.0in;text-indent:-.25in"><span style="color:#0F243E">b.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Chris Dillon: GoDaddy published some stats on IDN phishing. Cases are rare.<o:p></o:p></span></p><p class="MsoListParagraph" style="margin-left:1.0in;text-indent:-.25in"><span style="color:#0F243E">c.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Dennis will develop “confusable characters” item on work stream 1.<o:p></o:p></span></p><p class="MsoListParagraph" style="margin-left:1.0in;text-indent:-.25in"><span style="color:#0F243E">d.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Dusan will develop “create test cases to identify UA/IDN gaps in applications” item on work stream 2<o:p></o:p></span></p><p class="MsoListParagraph" style="margin-left:1.0in;text-indent:-.25in"><span style="color:#0F243E">e.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Repository of practices, gap assessment, etc. should be maintained in ICANN wiki (Action item: Dennis to set up page and share link to group members)<o:p></o:p></span></p><p class="MsoListParagraph" style="text-indent:-.25in"><span style="color:#0F243E">3.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span><span style="color:#0F243E">Next group meeting: Tuesday, June 9 @ 13:00 UTC<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E"><o:p> </o:p></span></p><p class="MsoNormal"><span style="color:#0F243E">End of notes<o:p></o:p></span></p><p class="MsoNormal"><span style="color:#0F243E"><o:p> </o:p></span></p><p class="MsoNormal"><span style="color:#0F243E"><o:p> </o:p></span></p><div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;"><a href="mailto:ua-international-bounces@icann.org">ua-international-bounces@icann.org</a> [<a href="mailto:ua-international-bounces@icann.org">mailto:ua-international-bounces@icann.org</a>]
<b>On Behalf Of </b>Tan Tanaka, Dennis<br><b>Sent:</b> Tuesday, May 26, 2015 8:50 AM<br><b>To:</b> <a href="mailto:ua-international@icann.org">ua-international@icann.org</a><br><b>Subject:</b> [UA-International] Meeting agenda 5/26<o:p></o:p></span></p></div></div><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">Agenda items:<o:p></o:p></p><p class="MsoListParagraph" style="text-indent:-.25in">1.<span style="font-size: 7pt; font-family: 'Times New Roman', serif;">
</span>Roll call<o:p></o:p></p><p class="MsoListParagraph" style="text-indent:-.25in"><span style="color:#0F243E">2.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span>Re-cap i18n charter <a href="https://docs.google.com/document/d/1wO9ubXdg02iptqwMhacFR1UsWKjPiMizXU5M5XmWzZc/edit?usp=sharing">
https://docs.google.com/document/d/1wO9ubXdg02iptqwMhacFR1UsWKjPiMizXU5M5XmWzZc/edit?usp=sharing</a><span style="color:#0F243E"><o:p></o:p></span></p><p class="MsoListParagraph" style="text-indent:-.25in"><span style="color:#0F243E">3.</span><span style="font-size: 7pt; font-family: 'Times New Roman', serif; color: rgb(15, 36, 62);">
</span>Review and discuss DRAFT i18n working plan <span style="color:#0F243E"><a href="https://docs.google.com/document/d/183UHeDMvdXVUk1W_4WJOhfFqUGx0DGWa9UeReKcCfOE/edit?usp=sharing">https://docs.google.com/document/d/183UHeDMvdXVUk1W_4WJOhfFqUGx0DGWa9UeReKcCfOE/edit?usp=sharing</a><o:p></o:p></span></p><p class="MsoListParagraph" style="text-indent:-.25in">4.<span style="font-size: 7pt; font-family: 'Times New Roman', serif;">
</span>Other items<o:p></o:p></p><p class="MsoListParagraph" style="text-indent:-.25in">5.<span style="font-size: 7pt; font-family: 'Times New Roman', serif;">
</span>Adjourn<o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><b><span style="font-size:10.0pt">I18n Project Group co-Lead<o:p></o:p></span></b></p><p class="MsoNormal"><span style="font-size:9.0pt">Universal Acceptance: <a href="https://icann.org/universalacceptance"><span style="color:windowtext">https://icann.org/universalacceptance</span></a><o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">Join the conversation: </span><span style="font-size: 9pt; font-family: Arial, sans-serif; background-color: white; background-position: initial initial; background-repeat: initial initial;"> </span><u><span style="font-size:9.0pt;background:white"><a href="https://mm.icann.org/mailman/listinfo/ua-international"><span style="color:windowtext">https://mm.icann.org/mailman/listinfo/ua-international</span></a><o:p></o:p></span></u></p><p class="MsoNormal"><span style="font-size:9.0pt">Project group archive: <a href="http://mm.icann.org/pipermail/ua-international/"><span style="color:windowtext">http://mm.icann.org/pipermail/ua-international/</span></a><o:p></o:p></span></p><p class="MsoNormal"><o:p> </o:p></p><h5><span style="color:gray">“This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed, and may contain information that is non-public, proprietary, privileged, confidential and exempt from disclosure
under applicable law or may be constituted as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this
message in error, notify sender immediately and delete this message immediately.”
<o:p></o:p></span></h5><h5><span style="color:gray">“This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed, and may contain information that is non-public, proprietary, privileged, confidential and exempt from disclosure
under applicable law or may be constituted as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this
message in error, notify sender immediately and delete this message immediately.”
<o:p></o:p></span></h5></div><h5><font color="gray">“This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed, and may contain information that is non-public, proprietary, privileged, confidential and exempt from disclosure
under applicable law or may be constituted as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this
message in error, notify sender immediately and delete this message immediately.”
</font></h5><font color="gray"></font></div></div></span></body></html>