Who or what gets to say what a valid TLD is? Especially when people take advantage of their own local resolvers, they could create anything at any time.
Right, but browsers don't automatically recognize those, as far as I know. If you want to visit a site with a custom TLD I believe you have to prefix it with the protocol.
