By nature, a personal (clearnet) domain is a single point of failure, because forever and always attackers know where the site is hosted. This is how DNS works

By nature, a personal (clearnet) domain is a single point of failure, because forever and always attackers know where the site is hosted. This is how DNS works unfortunately and it's very broken. No such problem exists with TOR hidden services, so krebs could have his own .ONION and it would prove very tricky to uncover the servers and boot them offline. Another mitigation (and there are many DDOS mitigations I'm leaving out here) is duplicating the content at several different locations, which already have their DDOS mitigations in place. So if you really want to be heard, hit Google Plus, Blogger, Twitter, Pastebin, etc. Just copy and paste your message all over the Internet, and it can prove nearly impossible to censor. Bonus points for multiple 'backup TLDs' so you could have: krebsonsecurity.org krebsonsecurity.net krebsonsecurity.io krebsonsecurity.biz You only use these in special circumstances like sharing a blogpost with your friend via email. More bonus points for mirroring static posts with Varnish cache on multiple sub-domains like wwa.krebsonsecurity.org wwb.krebsonsecurity.org ww3.krebsonsecurity.org Even more bonus points for putting resources on CoralCDN: http://www.coralcdn.org/ http://www.coralcdn.org/