Skip to content
NewA calmer, faster ZeroHour

Unicode Consortium publishes UTS #39 version 18.0.0

Original title: UTS #39: Unicode Security Mechanisms

Hacker News · securityby robin_reala ()13 min read1 · 1 read
AI summary · x-ai/grok-4.7Summaries by Vani AI

Version 18.0.0, dated August 27, specifies identifier security profiles and confusable and mixed-script detection.

The Unicode Consortium approved Unicode Technical Standard #39, Unicode Security Mechanisms, version 18.0.0 as a stable specification. It defines general, IDN, and email identifier security profiles plus confusable, mixed-script, restriction-level, and mixed-number detection. Conformance clauses let implementations follow the profiles unchanged or document precise character additions and removals. It is meant to be used with Unicode Technical Report #36.

Key facts
  • Editors are Josh Hadley and Roozbeh Pournader; the document date is August 27.
  • This publication is revision 34; the previous version was tr39-32.
  • Implementations may add or remove characters if they publish a precise list.
  • Related guidance is in Unicode Technical Report #36, Unicode Security Considerations.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

13 min read at unicode.org

Because Unicode contains such a large number of characters and incorporates the varied writing systems of the world, incorrect usage can expose programs or systems to possible security attacks.

Hacker News · security

By robin_reala · unicode.org

Read the full article at Hacker News · security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.