Unicode is fun. > (char=? #\A #\Α) #f

Tip: The second A is greek.

kinda reminds me… aren’t there people registering domain names using homographes as domain names (e.g. "http://amazon.com\|amazon.com" but with the “a” being the greek letter instead so it appears valid, but routes somewhere else entirely different)?

Sadly, it sounds plausible.

i remember it being discussed as a likely out come of allowing unicode in domain names

Yeah, it’s one of those “I’m not sure if it’s just an urban legend” deals

These are called “punycode attacks”. I’m not sure how effectively they’ve been used in real phishing cases.

wasn’t there once a punycode domain that crashed iOS? or am I thinking of things

If you type that A in for the a in http://amazon.com\|amazon.com, you get this in the browser: http://www.xn--mazon-c9d.com/

so it avoids that problem

I recall it used to be a real vulnerability, and they fixed it by make it render like “http://www.xn--mazon-c9d.com\|www.xn--mazon-c9d.com”

Thanks @gknauth !

You’re welcome! Thank you for all you do!