How would you differentiate say:
"http://googlemail.buyviagra.com"
From: "https://mail.google.com"
If they looked the same.
From: "https://mail.google.com"
If they looked the same.
Because the #1 use case for this isn’t emoji, but sites such as bücher.de (I originally had a link here to the site, but HN punycodes that: http://xn--bcher-kva.de/ ) (which nowadays had to redirect, because the URL displayed in punycode made people believe it was a phishing attempt)