Also to note that RS domain is Serbia, who could simply redirect all rust users to malicious domains in a supply chain attack.

How realistic is for a TLD “owner” to take over a domain like this?

	▲	vasachi 3 hours ago \| parent [-]
		Doesn't USA do that all the time with .com and such?

estebank 3 hours ago | parent | prev [-]

How would that get around the SSL certificate?

	▲	nyc_pizzadev 3 hours ago \| parent [-]
		If you control the domain, LetsEncrypt will happily issue you a fresh certificate.