How are you supposed to know that the key is right? Does this expect users to verify the domain is correct? The web has shown us that that is a very unreliable process.