> > > Oh, and 'i' and 'l' need to be banned as well, because a san-serif uppercase I > looks a lot like a san-serif lowercase l. (In fact, in the font I'm currently > using, > the two are pixel-identical). > > I don't see anybody calling for the banning of 'i' and 'l' in domain names > due to that.
The very first phishing message I ever saw was from paypa1.com.
--Steve Bellovin, https://www.cs.columbia.edu/~smb
