4 ms·
So, I have accounts on several DNS providers and notice that the security is barebones, mostly username and password. Now, I've got a few domains but exactly $
by mancerayder 9y ago
So, I have accounts on several DNS providers and notice that the security is barebones, mostly username and password. Now, I've got a few domains but exactly $0 in revenue or other people's stuff to worry about.
With all the obsession over painful security everywhere: stupidly complicated passwords that require password managers, 2FA with SMS or Google Authenticator, and that new terrible system where I have to click on pictures of cars or roadsigns for 5 minutes like I'm being tested for cognitive decline -- all that stuff, and some of the biggest DNS providers have miserably simple security.
I didn't see details of HOW DNS was hijacked in that article above but that's just one of my guesses.
Watch, soon you'll need to click on pictures of storefronts when logging in.
- technion 9y agoI can only encourage people to vote with their wallets on this. I moved my domain registry to AWS over a similar situation, after evaluating several alternative registrars and not finding MFA. I would certainly do so with DNS. Much like Microsoft's security push around Windows XP SP1 - security will become important to these companies when it impacts revenue.