<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright (c) 2007-2010 Nokia Corporation and/or its subsidiary(-ies) All rights reserved. -->
<!-- This component and the accompanying materials are made available under the terms of the License 
"Eclipse Public License v1.0" which accompanies this distribution, 
and is available at the URL "http://www.eclipse.org/legal/epl-v10.html". -->
<!-- Initial Contributors:
    Nokia Corporation - initial contribution.
Contributors: 
-->
<!DOCTYPE concept
  PUBLIC "-//OASIS//DTD DITA Concept//EN" "concept.dtd">
<concept id="GUID-EDA831F7-7248-5C00-B6BE-B7F44097C9B6" xml:lang="en"><title>WhiteList/BlackList
TLD Services Overview</title><shortdesc>This document introduces the Whitelist/Blacklist Top-Level Domain
services of the InetURIList framework. </shortdesc><prolog><metadata><keywords/></metadata></prolog><conbody>
<p>International domain names support increases the vulnerability of the device
to homograph attacks (also called phishing), by allowing addresses (URIs)
to contain UTF-8 characters. By using non-ASCII characters that are visually
similar to familiar letters, attacks can lead the Internet user to harmful
sites. </p>
<p>To address this issue, the InetURIList framework provides a list of suspect
characters (a BlackList) for each top-level domain (TLD). The framework also
lists trusted characters in TLD-specific WhiteLists. This enables applications
to detect safe and unsafe URIs depending on their top-level domain and the
characters they contain. </p>
<p>The Blacklists and Whitelists are stored in an XML file installed on the
device. You can replace the default TLD policy file by installing an SIS package
containing the updated lists. </p>
<p>Applications can query the TLD list but cannot dynamically change its contents. </p>
</conbody><related-links>
<link href="GUID-E97C2A7E-8E8F-58E6-99D4-288589385B44.dita"><linktext> Querying
the TLD policy data </linktext></link>
<link href="GUID-AC4C18D1-D6A3-5988-AB10-5A5025183950.dita"><linktext> Modifying
the TLD policy data</linktext></link>
<link href="GUID-6A78F618-09A9-56A7-8C58-98C353BF0788.dita"><linktext>What is the
Domain Name Server?</linktext></link>
</related-links></concept>