[Comments-korean-lgr-25jan18] Problems in K-LGR proposal
There are several critical issues in the current K-LGR proposal which will cause some attack vectors. Also, this proposal is not practical in current Korean language usage. First, This proposal may allow homograph attack between Hangul and Hanja. Homoglyph issue between Hangul and Hanja is well known but this proposal didn't address that issue correctly. Here is wiki page which has some list of homoglyphs between Hangul and Hanja: https://namu.wiki/w/%EC%95%BC%EB%AF%BC%EC%A0%95%EC%9D%8C?rev=1560#s-2.7 Also, this proposal didn't address homoglyphs in Hanja character set, which may cause problems in the same way. Second, Hangul-Hanja mixture causes combination problem. Since combination grows exponentially in given choices, three-word composed domain name yields 2^3 possibilities, which causes 8 possible domain name combination. If domain name registrant missed some of its possible combinations, an attacker may abuse unregistered combination for malicious usage like phishing. Third, their example about Hangul-Hanja mixed usage is quite out of date and overexaggerated. Section H.4.2 claims some trademarks use Hangul-Hanja mixture, but they're quite outdated. Samsung does not use that logo in production anymore. Also, Hyundai does not use that logo. Kumho and Dusan nither. They switched their trademark to English one or Korean one or English-Korean mixed one. Section H.6 overexaggerates status of Hanja education in Korea. In Section H.6.2, it says Hanja will be used in parallel with Hangul, but it is outdated information. Also, Hanja education is no longer mandatory in public schools. Since this proposal overexaggerated Hanja usage in Korea, its usefulness is overestimated and will be smaller than possible misuses of this proposal.
participants (1)
-
Yong-hyu Ban