4 comments
@inventor to rephrase my argument most clearly: The Swiss government has been using *.admin.ch for official communication for years. Phishing attacks pretending to be the Swiss government have happened. This doesn't make communication from *.admin.ch any less clearly official. This holds true even when *==social. @myrion It can be from any subdomain under a valid root domain. Examples: "социальные.", "с.", "со.", "sociaux.", "sosyal.", "mastodon."... literally anything. Doesn't matter at all. Only the root domain and certificate matter. @inventor aha! Then I misunderstood your objection. I will say that while it's true, I think it's a bit pedantic. The OP wasn't suggesting, afaict, that "social.any.domain" clearly would be official, but that "social.known.domain" would be clearly official, and sensible - in that it's like the ".well-known" directory on a webserver. Use the known domain, look for the social subdomain and voilà, there's the official social media accounts seems like a useful approach to me. |
@inventor I understand the concept of phishing attacks. I understand that they can even be performed against government workers.
This doesn't change the simple fact that admin.ch has been the official domain of the Swiss government for years and that social.admin.ch clearly is from the Swiss government, and that other governments following the same structure of social.well-known.domain is perfectly sensible.
At this point, I'm very confused about what you're even trying to argue, as the article doesn't have a single example mentioning subdomains (frankly, no details at all).
Phishing exists, therefore governments shouldn't be on the fediverse?
Phishing exists, therefore government accounts must be... what? Only from the main domain, because that's somehow safer?
@inventor I understand the concept of phishing attacks. I understand that they can even be performed against government workers.
This doesn't change the simple fact that admin.ch has been the official domain of the Swiss government for years and that social.admin.ch clearly is from the Swiss government, and that other governments following the same structure of social.well-known.domain is perfectly sensible.