Not really a problem if the host only serves static content. Author argues that there still is what I guess could be called a phishing vector: > All of this is

Not really a problem if the host only serves static content. Author argues that there still is what I guess could be called a phishing vector: > All of this is primarily an issue if people run non-trivial web applications that have accounts and logins. If the web pages are only used to host static content the issues become much less problematic, though it is still with some limitations possible that one user could show the webpage of another user in a manipulated way. It is really without limitations possible that one user could show the webpage of another user in a manipulated way, but for a static site that is true whether it can be done dynamically because they share domain or because the phisher can simply read your site content, copy and manipulate it.