3 ms·
RFC 6530 doesn't mention those character sets explicitly. It proposes allowing all Unicode characters, apart from some control characters. It is true that the
by dmurray 7y ago
RFC 6530 doesn't mention those character sets explicitly. It proposes allowing all Unicode characters, apart from some control characters.
It is true that the RFC recommends mailbox providers take normalization into account. A mailbox provider that allows i and dotless-i addresses to be routed to different mailboxes is careless, if not actually uncompliant. I don't know if any popular provider does this: I'm guessing the authors created their own to demonstrate this attack.
- notlukesky 7y agoTurkish characters are not part of RFC 6530. There are no email addresses with Turkish characters at all. They all use Latin characters. It just does not exist - yet at least.
- anderskaseorg 7y agoYes, they are part of RFC 6530, via its references to RFC 3629 (UTF-8) and the Unicode standard.
- lonelappde 7y agoUnicode is such a disaster for data processing that it's unfair to call anyone careless for getting it wrong.