Maven Central requires validation of a domain name in order to use a reverse-domain package[0]. It's not without problems. One is that folks often don't contro

Maven Central requires validation of a domain name in order to use a reverse-domain package[0]. It's not without problems. One is that folks often don't control the domain (consider Go's charming habit of conflating version control with package namespacing). Another is what was noted below: resurrection attacks on domains can be quite trivial and already happen in other forms (eg registering lapsed domains for user accounts and performing a reset). [0] https://central.sonatype.org/faq/how-to-set-txt-record/ https://central.sonatype.org/faq/how-to-set-txt-record/