ICANN a shit

* sells out with these retarded 'g'tlds
* now they want to expose everyones private details if they use DNS

https://www.respectourprivacy.com/

I know DNS is not secure, but it is still so bad that you can just have an access point with a hosts file that points www.banksite.com to a server in your house that serves a clone of the banking site in plain http and there would be no way for the user to tell the difference except for the absence of the lock icon in the url bar?