3.5 Enable IDN Show Punycode

Information

This feature determines whether all Internationalized Domain Names (IDNs) displayed in the browser are displayed as Punycode or as Unicode.
IDNs displayed in Punycode are easier to identify and therefore help mitigate the risk of accessing spoofed web pages.

Solution

Perform the following procedure:

* Open the mozilla.cfg file in the installation directory with a text editor

* Add the following lines to mozilla.cfg:

lockPref('network.IDN_show_punycode', true);

See Also

https://workbench.cisecurity.org/files/1158

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Windows

Control ID: ef4cfc5f55edd8730421a23056249816e146622588ae25d9841f06b8235785cf