Oddbean new post about | logout
 I think we can just say passwords are in UTF-8? 
 I'm no expert, but that link says:
> When encoding passwords with UTF-8, it is important to realize that there may be multiple UTF-8 representations of a given string. Since the key generated by a password-base key derivation function is dependent on the specific bytes, this matters a great deal.