You must log in or register to comment.
Because it has potential for spoofing.
“Hey, download this press kit from
https://totallylegitsite.com:stringofnonsense@document.zip/” looks like it’s going to a legit site, but it’s not.I think that has a very low chance of happening, and you could do it with any other TLD if the user doesn’t check the ending
