A flaw in Python's implementation of domain name processing caused inconsistent behavior between the specification and the code. This vulnerability stemmed from using modern Unicode case-folding rules instead of the older Unicode 3.2.
log in to read full article