That's why unicode published the security guidelines and mechanisms to avoid such attacks. In 2004 already. The problem is that nobody cared. Browsers invented

That's why unicode published the security guidelines and mechanisms to avoid such attacks. In 2004 already. The problem is that nobody cared. Browsers invented punycode instead of following tr39, email ditto. But ok, at least something. Java did it, cperl did, rust did it. Everybody else is vulnerable. Esp. most other programming languages, filesystems and login systems. https://github.com/rurban/libu8ident/blob/master/doc/c11.md https://github.com/rurban/libu8ident/blob/master/doc/c11.md