[scalableUnicon]

In Firefox, it used to show the punycode when clicked on the lock icon. Now I just checked one such domain(https://www.xn--80ak6aa92e.com/) and it didn't show the punycode until I clicked the lock icon > Connection Secure > More Information > View certificate button. I didn't know that the behavior was changed... I would have clicked the lock icon, saw `www.аррӏе.com` and would have believed I was visiting apple.com. I think it should not take more than one click to see the punycode, let alone a couple of clicks and opening a new dialog box.

[yunohn]

Safari on iOS shows the puny code domain name. No way to even see the dangerous one.

[bombcar]

This must suck for people who actually use them.

Ah I see it’s more nuanced - and works to detect homographs whilst permitting pure Chinese (for example).