[toxican]

The process looks about as bureaucratically complicated as I would expect.

[acdha]

Yeah, and I'm not even sure that's wrong: trusted top-level domains should be hard to get since they'd make great phishing sites.

There are something like 5,300 domains on the list currently:

https://github.com/GSA/data/blob/gh-pages/dotgov-domains/201...

I'm curious how many of those are actively supported and secure – I'd bet there are a least a few where almost nobody even remembers registering it.