The three email addresses of OpenID Connect (OIDC) in practice

Linking the validity of email domains to their OIDC provider domain is something I had never heard before.

But the whole SSO domain ownership is full of interesting security implications.