3.4 Enable IDN Show Punycode

Information

This setting determines whether Internationalized Domain Names (IDNs) displayed in the browser are displayed as Punycode or as Unicode.

Rationale:

IDNs displayed in Punycode are easier to identify and therefore help mitigate the risk of accessing spoofed web pages.

Solution

To establish the recommended configuration, set network.IDN_show_punycode to true:

Type about:config in the address bar

Type network.IDN_show_punycode in the filter

Configure the setting as prescribed.

OR

Open the mozilla.cfg file in the installation directory with a text editor

Add the following lines to mozilla.cfg:

lockPref('network.IDN_show_punycode', true);

Default Value:

False

See Also

https://workbench.cisecurity.org/files/4299

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Unix

Control ID: cbbd9eb47c50be049b2dbd1cfd779cbabfb066bc58b9e626436e776d778d44a4