The point is that you shouldn't ever be in that position to begin with. Maybe your regex does some simple sanity checks but you shouldn't ever be baking assumpt

The point is that you shouldn't ever be in that position to begin with. Maybe your regex does some simple sanity checks but you shouldn't ever be baking assumptions about the TLD into it. The confirmation email should do the heavy lifting.