[duskwuff]

> These things are easy to get, the idea is to at least slow down the deluge of scam apps and barely working "vibe coding" apps.

When you add bureaucratic hurdles to a process to try to slow down abuse, you often find that abusive users are more willing to navigate that process than legitimate ones. (We've seen this with email spam already - spammers are perfectly willing to set up DKIM and DMARC, and have stronger incentives to do it correctly than legitimate senders.)

[mschuster91]

> When you add bureaucratic hurdles to a process to try to slow down abuse, you often find that abusive users are more willing to navigate that process than legitimate ones.

In this case, it's not just a bureaucratic hurdle, it's adding a real external cost - app authors now have to go and deal with their government to get something DUNS accepts as a certification of entrepreneurship.

For single developers and legitimate startups, that cost is practically irrelevant and they're going to have to do it anyway to file taxes - but scammers run into the issue that they'll have to either use their own identity or have to clone someone else's which carries significantly more risk when the cops come investigating.

[iggldiggl]

The main goal of SP, DKIM and DMARC wasn't to slow down spammers by setting up "bureaucratic hurdles", it was to prevent domain spoofing, though, and arguably it's succeeded at that.