Is http://mydomain.com/[email protected] safe to use as URL?

Question

I consider to setup a server to deal with URLs including email address such as

http://mydomain.com/[email protected]

According to RFC  3986, I userstand @ is reserved on authority part = //mydomain.com/, but unreserved on path part /......., so currently I assume it's ok to use email address on pass.

Having said that, I still not sure if it is safe to use like http://mydomain.com/[email protected] on production.

Please advise. Thanks.

Answer 1

It's fine—your interpretation of the RFC is correct, and there's no "risk" (in terms of browsers doing the wrong thing) for using an @ in the URI portion.