3 ms·

but do you really control your domain? if somebody hacks into your registrar or forges your signature or something and transfers it to themselves, they would ge

but do you really control your domain? if somebody hacks into your registrar or forges your signature or something and transfers it to themselves, they would get your email, and it might be very difficult for you to get it back. Or maybe I am being too paranoid about this and it's less likely that your domain gets taken from you compared to your mail provider deciding to terminate you. You can also do something like using fastmail, where you don't control your domain, but being a paying customer you do have somebody to call if there are issues

brandon272 10y ago
This is something I have tried to weigh the risks of when it comes to use a Gmail account vs my own domain. What is more likely to happen: Google permanently locks me out out of my Gmail account or I forget to renew my domain or have it somehow stolen from me?
- kuschku 10y ago
  > What is more likely to happen: Google permanently locks me out out of my Gmail account or I forget to renew my domain or have it somehow stolen from me? Then use TLDs where that can't happen. If you forget to renew a .de domain, for example, you get a letter, and have 2 weeks to restore it, or end it - per default, it gets held in TRANSFER mode, for 50€/month. Also, you can always get the domain back, if you can prove ownership. There's many TLDs where such safety is standard.
icebraining 10y ago
I find the attack itself technically plausible, but where's the motivation? Why would someone go to the effort just to get some random personal domain? Sounds a little far-fetched, and I've never heard it happening to a personal domain of a non-VIP. Meanwhile, we know that Gmail accounts get terminated regularly, and appealing is hard-to-impossible.
- xyzzy123 10y ago
  Cryptocurrency mostly (based on public disclosures), but sometimes other digital assets like twitter handles or game currency. Sometimes domain names themselves are the asset. As is now well known, mobile numbers are often also hijacked to subvert weak 2fa.

brandon272 10y ago

This is something I have tried to weigh the risks of when it comes to use a Gmail account vs my own domain. What is more likely to happen: Google permanently locks me out out of my Gmail account or I forget to renew my domain or have it somehow stolen from me?

kuschku 10y ago
> What is more likely to happen: Google permanently locks me out out of my Gmail account or I forget to renew my domain or have it somehow stolen from me? Then use TLDs where that can't happen. If you forget to renew a .de domain, for example, you get a letter, and have 2 weeks to restore it, or end it - per default, it gets held in TRANSFER mode, for 50€/month. Also, you can always get the domain back, if you can prove ownership. There's many TLDs where such safety is standard.

icebraining 10y ago

I find the attack itself technically plausible, but where's the motivation? Why would someone go to the effort just to get some random personal domain? Sounds a little far-fetched, and I've never heard it happening to a personal domain of a non-VIP. Meanwhile, we know that Gmail accounts get terminated regularly, and appealing is hard-to-impossible.

xyzzy123 10y ago
Cryptocurrency mostly (based on public disclosures), but sometimes other digital assets like twitter handles or game currency. Sometimes domain names themselves are the asset. As is now well known, mobile numbers are often also hijacked to subvert weak 2fa.