So every time the FBI/CIA sets up a domain for a sting operation it has to be listed here? Seems like an Achilles' heel, no?
Definitely not.
"Federal executive branch agencies must ensure their non-.gov or .mil domains are on the list."
Also on this page, there is an "out of scope" list which only includes 4 things: SaaS, cloud resources, SNS sites, and code repos. I take the govt at its word--it has never lied before--so naturally covert ops must be "in-scope".
> ... Don't be snarky. ... Edit out swipes.