3 ms·

I did ask myself and I have a plan for each of those things. Except for FB, because I don’t give a damn. Basically the plan is to own your domain name, and bui

I did ask myself and I have a plan for each of those things. Except for FB, because I don’t give a damn. Basically the plan is to own your domain name, and build things around email that can be moved to any provider.

adventured 9y ago
What do you do for the email address that fundamentally controls the domain registration? There's also a high danger in a loop there, where your own domain supplies the email address that controls the domain. And if you don't go with that approach, what email provider do you then trust to provide that external validation point for the domain. I don't see how you can escape the risk.
- aianus 9y ago
  Why is there danger in the loop, exactly? I’ve never needed access to email to sign into my registrar (AWS) and change DNS records.
  - dorfsmay 9y ago
    Get on a VPN and try to log from there... It'll ask you to verify your login by sending you a code via email (because it detected your login from a different country and classify it as "unusual activity".
    - aianus 9y ago
      I’ve logged onto AWS from many different countries around the world and have never seen this. Maybe because I have 2FA enabled anyways?
      - dorfsmay 9y ago
        Could because you have 2FA, or could because you have been login from different countries right from the start (hence considered "usual"). Another case where I have seen AWS login ask for verification is when email bounces, which is exactly the case discussed here. One thing you can do for DNS and your host provider for your mail server is use a separate gmail account that forwards to your normal domain. It's unlikely that you'd lose both your DNS / mail server AND access to that independent gmail account. I wish service provider for essential services allowed more than one email. A work around is to setup up more than one "root" account, each setup with a different email provider.

adventured 9y ago

What do you do for the email address that fundamentally controls the domain registration? There's also a high danger in a loop there, where your own domain supplies the email address that controls the domain. And if you don't go with that approach, what email provider do you then trust to provide that external validation point for the domain. I don't see how you can escape the risk.

aianus 9y ago
Why is there danger in the loop, exactly? I’ve never needed access to email to sign into my registrar (AWS) and change DNS records.
- dorfsmay 9y ago
  Get on a VPN and try to log from there... It'll ask you to verify your login by sending you a code via email (because it detected your login from a different country and classify it as "unusual activity".
  - aianus 9y ago
    I’ve logged onto AWS from many different countries around the world and have never seen this. Maybe because I have 2FA enabled anyways?
    - dorfsmay 9y ago
      Could because you have 2FA, or could because you have been login from different countries right from the start (hence considered "usual"). Another case where I have seen AWS login ask for verification is when email bounces, which is exactly the case discussed here. One thing you can do for DNS and your host provider for your mail server is use a separate gmail account that forwards to your normal domain. It's unlikely that you'd lose both your DNS / mail server AND access to that independent gmail account. I wish service provider for essential services allowed more than one email. A work around is to setup up more than one "root" account, each setup with a different email provider.