It's always amazed me that ID.me, which you have to use in order to interact w/ the IRS online these days, has a top level domain from the country of Montenegro. Ublock Origin says they're injecting tracking links from Italy's TLD when you login at the irs.gov website.

What's next? Cookies from Colombia? AI from Anguilla?

To be clear, I have nothing against private companies or citizens using whatever TLD they want. But we need to stop doing this on important .gov stuff. And I would consider the IRS to easily qualify there.

@briankrebs I really wish everyone in general, and government institutions in particular, would take to heart the hierarchical nature of domains.

(Putting aside the preferential nature of .gov being US only, and not for all government)

Give us irs.federal.gov, legislature.wa.gov, etc!

I should be able to trust at a glance that something is the product of my state government based on the domain.