Hacker News Reader

Wait, aren't emojis explicitly prohibited from being used in IDNA? Or do the implementers just not bother to read the "IDNA Rules and Derived Property Values" table and simply allow anything that's a correct punycode?

View on HN

In summary, countries trump IDNA (and as you notice, it's all ccTLDs - ICANN will stop you if you tried this with a gTLD).

Kazakhstan and DNS. Always always my personal reminder that OWASP applies to all applications, and to always sanitize inputs. DAMHIK!

Don’t ask me how I know.

Reply on news.ycombinator.com