> Really - if you slowed down for a sec and thought about security, is this the language in which your employer emails you? That is the weakest part of your ar

> Really - if you slowed down for a sec and thought about security, is this the language in which your employer emails you? That is the weakest part of your argument. Companies are notoriously incompetent, yes, even domain registrars or whatever you categorize GoDaddy as. And what if they used better language? What then? Would you simply move the goal post to another way to victim blame? I know to avoid a lot of things because of experience, I know a lot of legitimate things act like illegitimate things. And a lot of illegitimate things can masquerade adequately as competent legitimate things. For example: I know to look at the DKIM and SPF headers in an email, specifically because email clients do not show you when someone is spoofing an email address with the exact same domain name. Not a phishing domain name, the exact same one. This is a real, ongoing UI problem. And there are other flaws out there too.