[maxclark]

The FTC action is because GoDaddy claimed to have security when they didn’t - not because they didn’t have security in the first place.

Subtle but important difference.

Also the remedies include having a complete security program within 90 days IIRC, on what world would anyone think that’s remotely possible?

They wouldn’t even have an RFP drafted in 90 days.

[asr]

GoDaddy will have known of this investigation since it began—probably for years. So it’s 90 days from now(ish), but they (should) have gotten a head start.