3 ms·
I'm not sure I'm buying into this .com elitism. In the end, it's a TLD like any other and its presence does not guarantee that your trust is warranted, as this
by feanaro 7y ago
I'm not sure I'm buying into this .com elitism. In the end, it's a TLD like any other and its presence does not guarantee that your trust is warranted, as this very case shows. It cannot replace actual verification and vetting of the sources you're installing software from.
An acknowledgement of the situation on the official site would be nice, though.
- hombre_fatal 7y agoYou don't take phishing/malware or your users seriously enough if you think "tld elitism" is a talking point here. See my sibling post.
- HunOL 7y agoWell, keepass.com was registered in 2005, and keepass.info in 2006.
- feanaro 7y agoWell, it is TLD elitism. Sometimes acquiring a domain is not an option. Sometimes you can lose domains. What then? Nothing can replace common sense and critical thinking when installing software from the internet. In the end, everything on the internet is potentially untrusted and blindly looking for ".com" is just a dumb strategy if your goal is not to get pwned. I really cannot bring myself to consider not acquiring <software_name>.com a failure of the software package creator. As I said, if they are aware of a currently on-going phishing attempt that is masquerading as their own software, a prominent tip on their actual website would be nice. The namespace is finite and not every website can be expected to be under .com. Also, the trustworthiness of a TLD is itself a fad, a fashion that changes over time. See: the popularity of .io.