Today I found my EDR's firewall will effectively block xn--*.* (but weirdly formatted). I've pleaded with my firewall, proxy and sase vendors for the last 10 years to do this.
"Regex is too much compute" they said, all-the-while while they deploy LLM / AI / agentic . Gas lit much?