Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'
by jcranmer on Tuesday December 17, 2019 @12:34AM
(#21810945)
By the time you hit IDNs, regexes for validation are no longer your biggest issue. Your real check for validity at that point becomes "can I actually contact the host" (or send an email, if validating an email address), and there is little point in aggressively validating a purported domain name instead of checking if it actually exists.
[0]https://www.iana.org/domains/idn-tables