You will never define an unambiguous way to index into a Unicode string by "characters" with less than 10 pages of specification. When two sides of the API inte

You will never define an unambiguous way to index into a Unicode string by "characters" with less than 10 pages of specification. When two sides of the API interpret this contract differently, a security vulnerability is a very possible outcome. Use unambiguous delimiters, JSON, XML, or even byte offsets into normalized UTF-8 instead. But don't do this please.