Editing Domain Name System (section)

=== DNS spoofing ===
Some domain names may be used to achieve spoofing effects. For example, {{mono|{{not a typo|paypal.com}}}} and {{mono|{{not a typo|paypa1.com}}}} are different names, yet users may be unable to distinguish them in a graphical user interface depending on the user's chosen [[typeface]]. In many fonts the letter ''l'' and the numeral ''1'' look very similar or even identical. This problem, known as the [[IDN homograph attack]], is acute in systems that support [[internationalized domain name]]s, as many character codes in [[ISO 10646]] may appear identical on typical computer screens. This vulnerability is occasionally exploited in [[phishing]].<ref>APWG. "Global Phishing Survey: Domain Name Use and Trends in 1H2010." [http://www.apwg.org/reports/APWG_GlobalPhishingSurvey_1H2010.pdf 10/15/2010 apwg.org] {{Webarchive|url=https://web.archive.org/web/20121003212327/http://apwg.org/reports/APWG_GlobalPhishingSurvey_1H2010.pdf|archive-url=https://web.archive.org/web/20101025105629/http://apwg.org/reports/APWG_GlobalPhishingSurvey_1H2010.pdf|archive-date=2010-10-25|url-status=live|date=2012-10-03}}</ref>