[tantek]"argue that's a software security flaw and this shouldn't be used" <-- nope, all that software & practices thereof PREDATE ".well-known" and should have been a strong enough reason to never propose and depend on ".well-known" in the first place.
