How well does the business.txt standard hold up against malicious behavior? For example, what happens if I want to defame Restaurant X, so I make restaurantXsucks.com and put a business.txt file in my root directory with the same address and contact information? Currently, Google Places (the service that puts stuff on Google Maps) mails a PIN to the address and requires verification before listing to mitigate this problem -- how would business.txt mitigate the problem?