Comment by Syonyk
4 years ago
I suppose I should have gone with "Unicode without emoji" instead of ASCII. I don't mind unicode, but I question the emoji parsing engines as they're doing all sorts of crazy stuff with modifiers, and even unicode rendering is oddly complex and likely has bugs in some corner case or another.
From a "I would like it as simple and secure as possible," ASCII does tick quite a few boxes.
I think it's been single-digit months since the last UTF-8 parsing vulnerability.
Syonyk still has a point even though this thread has gone sideways.
Plot twist: extended ASCII?