Thanks for the intellectual jog, consumer.
Made me think about email sercurity procedures.
1. Buy a domain specifically for identity verification and register it for 10 years.
2. Get a lawyer to notorize your intent with (1)
3. Put a SnapBack on that domain so that you get notified immediately if anyone tampers with that domain.
4. Use a service like Dotster's Namesafe and lock the domain dead.
5. Get a program like Softnik's Watch My Domain Pro and run it at least once a week to check on all your domains using that verification email.
6. Enable a website with that domain and get one of those downtime service alert providers to monitor that it is always alive.
7. Put a legal consul on retainer basis and make it very clear on that site that all attempts at hijacking and theft will be meticulously traced and prosecuted to the full extent of the law.
8. Screen-capture your domain whois and submit to 3 different witnesses that will testify its accuracy in court.
9. Use similiarly secured domains for the technical and billing contacts as backups.
10. State that all on your domains under theft prevention, so that it will scare the sh*t out of thieves.
If that doesn't do the trick, then go back to the cardinal trick, develop your site, trademark it, and make it popular so you have many witnesses.
I think a legal/security service that provides for monitoring and security of domains seems like a profitable venture today.