It's been fixed in all browsers except Firefox. Not work from Firefox how they'll address it, but the workaround (as explained in the article) is to disable displaying PunyCode in the URL bar.
https://www.wired.com/2017/04/sneaky-ex ... ok-secure/
Sneaky Exploit Allows Phishing Attacks From Sites That Look Secure
- FlyingPenguin
- Flightless Bird
- Posts: 33161
- Joined: Wed Nov 22, 2000 11:13 am
- Location: Central Florida
- Contact:
Sneaky Exploit Allows Phishing Attacks From Sites That Look Secure
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

Re: Sneaky Exploit Allows Phishing Attacks From Sites That Look Secure
Huh, that is sneaky.