This page is fully verified, except for the page itself

You come home and the kitchen isn't right. Cleaner, maybe. Your mug sits exactly where you left it, but the light through the window is off. You stand there holding the cup, turning slowly. Everything is where it should be and none of it is yours. You take a sip, trying to figure out what isn't right, and realise you don't know what you're drinking. It's warm, but it isn't tea. That's a domain hijack. Right door. Identical furniture. But not your place. On a screen it's quieter. You type your bank's address, or click the bookmark you've used for years. The page loads. The padlock is there. The logo, the layout, the wobble on the login button: all correct, because they copied all of it. And you type your password into it, giving it to the hacker. For a bank, that's a breach. Bad but survivable; the real ledger is on their machines, and they can hand your money back. For local-first and p2p apps it's an unrecoverable disaster. The whole point of what a lot of us are building is to push…