4 ms·
That's a really interesting read. FTA: "My first stop: WHOIS. The WHOIS database is designed to serve as a master directory of all domain name owners, although
by blakesterz 8y ago
That's a really interesting read. FTA:
"My first stop: WHOIS. The WHOIS database is designed to serve as a master directory of all domain name owners, although in my experience there are no controls enforcing the submission of valid information. Moreover, most domain name registrars now allow registrants to register anonymously by serving as a proxy for the registrant. Despite these shortcomings, it’s always a good place to start."
I know on balance the GDPR is a good thing, but we are really going to miss WHOIS.
- always_good 8y agoWho is going to miss WHOIS? I'm not. If it was opt-in I bet nobody would even reveal their details at all. At worst, you're just accidentally doxing yourself and setting yourself up for a social engineering attack. For example, name, email, and (wrong but close) address were enough to get someone into this guy's Amazon account: https://medium.com/@espringe/amazon-s-customer-service-backdoor-be375b3428c4 https://medium.com/@espringe/amazon-s-customer-service-backd...
- dredmorbius 8y agoMany interested in mitigating abuse.
- always_good 8y agoThey can report the domain to the registrar. Doing something with WHOIS info sounds more like a cloak and dagger fantasy. In reality, having your personal info in your WHOIS sets you up for abuse.
- dredmorbius 8y agoTying together multiple domains to a single authority (as here) is useful. Essential? Dunno. But definitely useful. Source: used WHOIS extensively in abuse mitigation and reporting. Registrars tend to DGAF, though I suppose blanket blocks of all domains from a given registrar, practiced widely enough, might have impacts.