No, I never said I thought it was good business practice. But I'm saying it's not good business practice to ignore it. If you can afford to ignore it, then ther

No, I never said I thought it was good business practice. But I'm saying it's not good business practice to ignore it. If you can afford to ignore it, then there's no issue, but there's plenty of sites that don't have protection against this, and have money on the line if they get taken down. The cost of paying off (a semi-probable) attack, might be better than going down the next day, and having to firefight it. I'm playing the devil's advocate here. I would not pay x thousand dollars because of an email from said group, but I can understand it slightly better than sending money for nigerian scams.