> or an attack on DNS or BGP, or any other novel spoofing attack Even though it’s be relevant form as systems-thinking point of view, it’s pretty unfair to dis

> or an attack on DNS or BGP, or any other novel spoofing attack Even though it’s be relevant form as systems-thinking point of view, it’s pretty unfair to dismiss a solution because it will be vulnerable to very important pieces of Internet network infrastructure. I think it’s safe to say that if we get a sufficiently bad vulnerability in DNS or BGP, account confirmation emails are going to be least of our worries. Additionally “any novel spoofing attack” is a very hand-wavy, low effort way to dismiss it as well.