Earlier quoted context omitted.
Yeah. Try using wildcard email accounts together with a uncommon TLD, and people ask me if I work at their place all the time. Last time I booked a car at Hertz: > Me: My email is hertz@capableweb.work > Agent: Woah, you work here at Hertz? That's so cool > Me: sure, can you remind me of the employee discount again? So many email validations fail with a uncommon gTLD that I started switching everything to a .com doma…
As a security person its hard as heck training (some of) our users to understand how basic domain formats work. We use a phishing simulation service, and outside of certain content,putting part or all of our company name in the domain but adding other words/underscores/etc is what tricks a lot of people. I tend to explain how it works in a basic format, and often you can see the light bulb go off when I point out how…
It took me a while to know that FQDNs can (and sometimest must?) start at root with a period, meaning every address you've ever typed could have finished with a period (news.ycombinator.com.) and I recall some newspaper (NYT? News Yorker?) failing to test for that when people want to bypass their paywall. And this is a valid email address apparently: #!$%&’*+-/=?^_`{}|~@example.com
RFCs/codified norms by tech people are just weird to normal people.