[kubanczyk]

A primer (taken straight from GP's first link):

> the full case foldings are superior: for example, they allow "MASSE" and "Maße" to match.

[skupig]

This sounds like a fun vulnerability to find in a password reset flow

[thrdbndndn]

Yeah but isn't email address in ascii? I still have no idea why it would be different.

[umanwizard]

> isn't email address in ascii?

Yes in the basic SMTP RFC, but there are extensions that allow non-ascii local-parts.

[tssva]

Another falsehood to add to the list.