Yeah, this is the biggest problem with the proposed change to URLs. When you can have two different characters that are visually identical but have different meaning to computers, you have a serious security problem.