4 ms·
The end of the article raised a good point though: this is going to train people to click on links in emails that look like they came from their registrar. Tha
by thaumaturgy 13y ago
The end of the article raised a good point though: this is going to train people to click on links in emails that look like they came from their registrar.
That's bad.
The registrar is public information. The registrant's contact information is public (or at least publicly accessible). So, wait a year for people to get accustomed to clicking on links in emails from their registrar, pick a target domain, forge an email from the registrar, send it to owner contact with a link to a phishing page. Congratulations, enjoy your new domain.
- derefr 13y agoThe email address doesn't seem to be the thing registrars should be "validating" about contact information, anyway. Shouldn't my registrar be calling/texting a code to the included phone number, and sending a letter with another code to the included mailing address?