@th3_protoCOL holy sh*t. Not a single proof of ownership of the target domain...? That seems to be pretty straightforward to implement, so I must be missing some key point here... I know, less friction, yada yada, but this defeats even the more savvy users, as they assume this entry point as trusted. I sure did!