20 ms·

In case this turned out to be misleading, I picked a random GoDaddy-hosted low-cost site (hometailer.com) and yep, there's the code: <script>'undefined'=== typ

In case this turned out to be misleading, I picked a random GoDaddy-hosted low-cost site (hometailer.com) and yep, there's the code: <script>'undefined'=== typeof _trfq || (window._trfq = []);'undefined'=== typeof _trfd && (window._trfd=[]),_trfd.push({'tccl.baseHost':'secureserver.net'}),_trfd.push({'ap':'cpbh'},{'server':'a2plvcpnl83247'}) // Monitoring performance to make your website faster. If you want to opt-out, please contact web hosting support.</script><script src='https://img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js'></script> https://img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js'></sc... That's pretty gross.

gigatexal 8y ago
Happy with my namecheap domain hosted in Linode: never going to touch a godaddy domain for any of my needs.
- abc-xyz 8y ago
  A lot of people recommending NameCheap in this thread.. it's worth noting that they supposedly gave a warning to a guy running a forum with millions of visitors that they would suspend his account if he didn't remove two images within 24 hours (https://news.ycombinator.com/item?id=14139288 https://news.ycombinator.com/item?id=14139288), and that they're dumping costumers private info (https://news.ycombinator.com/item?id=18063667 https://news.ycombinator.com/item?id=18063667). I'm guessing there are other horror stories as well, but those two alone (which to me sound credible) were enough reason to take my business elsewhere.
  - Fizzadar 8y ago
    This - after their support requested my password over live chat I've since moved every domain I own to Gandi upon renewal.
    - jacurtis 8y ago
      Hey, the same thing happened to me! They asked for my password during a livechat session, and i was like "what the hell". Also, another time I was having problems with their stupid 2FA app (back when they ran their own app and it broke constantly), and their solution was to just disable the 2FA for my account. They said I can set it up again whenever I want to. So then I told the woman, that if someone wanted to hack into my account, they could just open a livechat and get my 2FA disabled and then log in, why should I even bother having 2FA at all if you're just going to disable it. To be fair, they finally moved to a more traditional 2FA now, where you can use any 2FA app instead of their proprietary namecheap app. So they might not do this anymore. I think they were disabling 2FA back when they used their own app for it, because it was super buggy and people (like myself) would get locked out of our accounts for no reason other than their app was buggy.
  - welder 8y ago
    I can recommend https://easydns.com/ https://easydns.com/
    - DyslexicAtheist 8y ago
      seconded. been using this for years and works incredibly well - perfect also also as a secondary DNS. Their UI hasn't always been the latest & greatest (but even here they came a long way in the past 2 years). their knowledgeable (and helpful) customer support really makes up for it. I don't know the internals of the company but would assume that the people running it are still the same team who founded it and they really know networking & DNS inside-out. Refreshing in a time where financial and marketer types have taken over a lot of the decision making in tech or where you're in a customer support loop for ages and everything is handled by a bot.
  - pieterhg 8y ago
    Move your domains to Cloudflare.
    - StavrosK 8y ago
      I did, largely because they take security seriously, but CloudFlare domains isn't a registrar: You can't set the nameservers to whatever you want. It's a CloudFlare lock-in service.
      - JoelTheSuperior 8y ago
        The fact that you can't change the nameservers doesn't make them not a registrar. They absolutely are a registrar. Just one that doesn't let you change the nameservers. But you know what? I'm okay with that. I honestly can't think of a scenario where I'd want to use any other nameservers.
        yayana 8y ago
        > I honestly can't think of a scenario where I'd want to use any other nameservers. What about the scenerio where you are thrown off of cloudflare service? A CDN is more inclined to ban sites to limit their own risks from litigious IP owners, etc, irregardless of who would win an actual court case.
        shawnz 8y ago
        Why would they continue allowing you to use the registrar but not the nameservers?
        yayana 8y ago
        I'm saying why would you let a CDN be your registrar in what sounds like an abnormal registrar agreement. (If they block you from the CDN, what happens then?)
        8y ago
  - gigatexal 8y ago
    I've had nothing but great experiences with their support staff. I guess it's a your-mileage-may-vary kind of thing.
  - Crosseye_Jack 8y ago
    Their “no upselling” policy has taken a bit of a nose dive these days with pestering about things. In an email I have with their CS they said it’s not upselling, but offering you things other customers have found useful... Yeah right... all it’s not as annoying as GoDaddy’s at least was (not used them in years) but you are still trying to upsell me; just ditch your no upsell policy :-p I still have a few domains with them it I’ve been using namesilo lately after hearing about them here and no complaints. Well the only complaint I have of them is they don’t have the range of TLD’s as namecheap does (but it’s only a handful of TLDs such as .es)
  - benbristow 8y ago
    I've been using OVH for my domains. They're cheap and pretty good to be honest.
- dbg31415 8y ago
  I was a huge fan of Namecheap, and I have like 25 clients using them. But... I haven't been a fan of them lately. I've got a password manager and 2FA on all my accounts, and I went to sign in. I kept getting an incorrect password response. Reset, tried again. Just kept getting the same error. Freaked me out as I couldn't sign in. Fast forward, came to find out because I was on my company VPN they were blocking me. Rather than just show a message, "We don't accept users on a VPN..." they let me think my password was wrong and go through the panic of not being able to sign in. And, even thought they thought I was some sort of spammer / hacker for using a VPN, they were more than happy to discuss my sign in details over live chat. I sort of get "security" here, but they shouldn't be heavy handed with just saying who can and can't sign in, and if you are going to block me, tell me why -- at least send an email letting me know what's up if you don't want to display a browser message. 2FA was enabled, at that point... just leave it up to the user where they want to sign in from, don't put in secret rules around who can and can't sign in. Anyway, I moved everyone over to Amazon Route 53 and haven't had any more issues.
  - WayToDoor 8y ago
    Unfortunately that's what many companies do. IIRC, this includes connecting with OVH ips to mojang (minecraft) login servers. It's becoming a popular practice that is not good in UX terms at all
    - behringer 8y ago
      Sounds like a great practice. You don't let the spammer know they're found out, and if you call customer support about it they are able to tell you what's wrong after you've verified extra info. Would you rather they give hackers access to lock you out or unlimited access to keep trying?
      - hobs 8y ago
        Security by obscurity is none at all, the customer/hacker can call up and provide information/pretext no problem - plus the information is available on public sources (such as this one) on why the issue occurs - a smart enough attacker can just use other proxies until it finds one you didnt ban, whereas legit users are probably SOL.
- criley2 8y ago
  This solution is for the 1% or the 0.1%, the vast majority who choose Linode are creating vulnerable servers because they are not going to competently keep the machine up to date on security patches or configure it properly for security. Managed hosting is a requirement for the masses, and comparing a managed hosting service with a self-service VPS is a bit disingenuous IMO. Managed may seem more pricey, but that's only unless you don't value your own time as an administrator, or if your time isn't valuable (you're not good at it lol).
  - gigatexal 8y ago
    For my static website I think it’s ok.
    - chias 8y ago
      Parent comment is referring to software vulnerabilities running on the box itself, not vulnerabilities in your website. When Apache or whatever it is that you use to serve your static website comes out with a vulnerability that allows RCE as root, it becomes a problem for you, even if your website is static. FWIW I use Namecheap / Linode myself, and will probably never go back to shared hosting. But the flip side of that coin is you do need to manage it, regardless of the website you are hosting.
      - bad_user 8y ago
        You can configure that machine to automatically update itself, which is what I do. And I don't think GoDaddy or other managed hosting providers are doing a better job than this. Also FYI static websites have a much smaller surface of attack when compared to forever-vulnerable shit like WordPress.
        jacurtis 8y ago
        yes, this. Godaddy is not doing much more than auto-updating packages with security fixes. This is easily handled with most Linux VPSs (often automatically, in the case of DigitalOcean). I am pretty sure the Amazon Linux AMIs do this too on AWS EC2. And most other distros can turn this on once with one command. I don't think GoDaddy is going much deeper than this, so security is a moot comparison between the two. In fact most sites are hacked at the application level anyway, not the system level. So the real security hole is not something on Linux, but the actual wordpress site thats installed within it. Food for thought: 83% of hacked websites in 2017 were Wordpress sites. Source: https://sucuri.net/reports/2017-hacked-website-report https://sucuri.net/reports/2017-hacked-website-report
- 1337shadow 8y ago
  If you're happy with namecheap you will be delighted with bookmyname imho
christophilus 8y ago
GoDaddy is the Oracle of web hosting companies. I don’t understand their popularity, yet it seems to be going strong. Why is that? (Serious question, not rhetorical.)
- SteveNuts 8y ago
  I would guess it's their marketing that helps. They're one of the few with prime-time TV commercials.
- swebs 8y ago
  Advertising. I remember seeing tons of not-quite-porn ads from them even during superbowls.
  - 3dfan 8y ago
    Are they profitable?
    - therealdrag0 8y ago
      $139.8 million net income in 2017.
  - collinmanderson 8y ago
    They stopped those fall 2013.
    - TheCoelacanth 8y ago
      So, long after those ads had made them a household name?
    - foob 8y ago
      That's quite specific. Do you know what the impetus for them to stop was?
      - 8y ago

gigatexal 8y ago

Happy with my namecheap domain hosted in Linode: never going to touch a godaddy domain for any of my needs.

abc-xyz 8y ago
A lot of people recommending NameCheap in this thread.. it's worth noting that they supposedly gave a warning to a guy running a forum with millions of visitors that they would suspend his account if he didn't remove two images within 24 hours (https://news.ycombinator.com/item?id=14139288 https://news.ycombinator.com/item?id=14139288), and that they're dumping costumers private info (https://news.ycombinator.com/item?id=18063667 https://news.ycombinator.com/item?id=18063667). I'm guessing there are other horror stories as well, but those two alone (which to me sound credible) were enough reason to take my business elsewhere.
- Fizzadar 8y ago
  This - after their support requested my password over live chat I've since moved every domain I own to Gandi upon renewal.
  - jacurtis 8y ago
    Hey, the same thing happened to me! They asked for my password during a livechat session, and i was like "what the hell". Also, another time I was having problems with their stupid 2FA app (back when they ran their own app and it broke constantly), and their solution was to just disable the 2FA for my account. They said I can set it up again whenever I want to. So then I told the woman, that if someone wanted to hack into my account, they could just open a livechat and get my 2FA disabled and then log in, why should I even bother having 2FA at all if you're just going to disable it. To be fair, they finally moved to a more traditional 2FA now, where you can use any 2FA app instead of their proprietary namecheap app. So they might not do this anymore. I think they were disabling 2FA back when they used their own app for it, because it was super buggy and people (like myself) would get locked out of our accounts for no reason other than their app was buggy.
- welder 8y ago
  I can recommend https://easydns.com/ https://easydns.com/
  - DyslexicAtheist 8y ago
    seconded. been using this for years and works incredibly well - perfect also also as a secondary DNS. Their UI hasn't always been the latest & greatest (but even here they came a long way in the past 2 years). their knowledgeable (and helpful) customer support really makes up for it. I don't know the internals of the company but would assume that the people running it are still the same team who founded it and they really know networking & DNS inside-out. Refreshing in a time where financial and marketer types have taken over a lot of the decision making in tech or where you're in a customer support loop for ages and everything is handled by a bot.
- pieterhg 8y ago
  Move your domains to Cloudflare.
  - StavrosK 8y ago
    I did, largely because they take security seriously, but CloudFlare domains isn't a registrar: You can't set the nameservers to whatever you want. It's a CloudFlare lock-in service.
    - JoelTheSuperior 8y ago
      The fact that you can't change the nameservers doesn't make them not a registrar. They absolutely are a registrar. Just one that doesn't let you change the nameservers. But you know what? I'm okay with that. I honestly can't think of a scenario where I'd want to use any other nameservers.
      - yayana 8y ago
        > I honestly can't think of a scenario where I'd want to use any other nameservers. What about the scenerio where you are thrown off of cloudflare service? A CDN is more inclined to ban sites to limit their own risks from litigious IP owners, etc, irregardless of who would win an actual court case.
        shawnz 8y ago
        Why would they continue allowing you to use the registrar but not the nameservers?
        yayana 8y ago
        I'm saying why would you let a CDN be your registrar in what sounds like an abnormal registrar agreement. (If they block you from the CDN, what happens then?)
        8y ago
- gigatexal 8y ago
  I've had nothing but great experiences with their support staff. I guess it's a your-mileage-may-vary kind of thing.
- Crosseye_Jack 8y ago
  Their “no upselling” policy has taken a bit of a nose dive these days with pestering about things. In an email I have with their CS they said it’s not upselling, but offering you things other customers have found useful... Yeah right... all it’s not as annoying as GoDaddy’s at least was (not used them in years) but you are still trying to upsell me; just ditch your no upsell policy :-p I still have a few domains with them it I’ve been using namesilo lately after hearing about them here and no complaints. Well the only complaint I have of them is they don’t have the range of TLD’s as namecheap does (but it’s only a handful of TLDs such as .es)
- benbristow 8y ago
  I've been using OVH for my domains. They're cheap and pretty good to be honest.
dbg31415 8y ago
I was a huge fan of Namecheap, and I have like 25 clients using them. But... I haven't been a fan of them lately. I've got a password manager and 2FA on all my accounts, and I went to sign in. I kept getting an incorrect password response. Reset, tried again. Just kept getting the same error. Freaked me out as I couldn't sign in. Fast forward, came to find out because I was on my company VPN they were blocking me. Rather than just show a message, "We don't accept users on a VPN..." they let me think my password was wrong and go through the panic of not being able to sign in. And, even thought they thought I was some sort of spammer / hacker for using a VPN, they were more than happy to discuss my sign in details over live chat. I sort of get "security" here, but they shouldn't be heavy handed with just saying who can and can't sign in, and if you are going to block me, tell me why -- at least send an email letting me know what's up if you don't want to display a browser message. 2FA was enabled, at that point... just leave it up to the user where they want to sign in from, don't put in secret rules around who can and can't sign in. Anyway, I moved everyone over to Amazon Route 53 and haven't had any more issues.
- WayToDoor 8y ago
  Unfortunately that's what many companies do. IIRC, this includes connecting with OVH ips to mojang (minecraft) login servers. It's becoming a popular practice that is not good in UX terms at all
  - behringer 8y ago
    Sounds like a great practice. You don't let the spammer know they're found out, and if you call customer support about it they are able to tell you what's wrong after you've verified extra info. Would you rather they give hackers access to lock you out or unlimited access to keep trying?
    - hobs 8y ago
      Security by obscurity is none at all, the customer/hacker can call up and provide information/pretext no problem - plus the information is available on public sources (such as this one) on why the issue occurs - a smart enough attacker can just use other proxies until it finds one you didnt ban, whereas legit users are probably SOL.
criley2 8y ago
This solution is for the 1% or the 0.1%, the vast majority who choose Linode are creating vulnerable servers because they are not going to competently keep the machine up to date on security patches or configure it properly for security. Managed hosting is a requirement for the masses, and comparing a managed hosting service with a self-service VPS is a bit disingenuous IMO. Managed may seem more pricey, but that's only unless you don't value your own time as an administrator, or if your time isn't valuable (you're not good at it lol).
- gigatexal 8y ago
  For my static website I think it’s ok.
  - chias 8y ago
    Parent comment is referring to software vulnerabilities running on the box itself, not vulnerabilities in your website. When Apache or whatever it is that you use to serve your static website comes out with a vulnerability that allows RCE as root, it becomes a problem for you, even if your website is static. FWIW I use Namecheap / Linode myself, and will probably never go back to shared hosting. But the flip side of that coin is you do need to manage it, regardless of the website you are hosting.
    - bad_user 8y ago
      You can configure that machine to automatically update itself, which is what I do. And I don't think GoDaddy or other managed hosting providers are doing a better job than this. Also FYI static websites have a much smaller surface of attack when compared to forever-vulnerable shit like WordPress.
      - jacurtis 8y ago
        yes, this. Godaddy is not doing much more than auto-updating packages with security fixes. This is easily handled with most Linux VPSs (often automatically, in the case of DigitalOcean). I am pretty sure the Amazon Linux AMIs do this too on AWS EC2. And most other distros can turn this on once with one command. I don't think GoDaddy is going much deeper than this, so security is a moot comparison between the two. In fact most sites are hacked at the application level anyway, not the system level. So the real security hole is not something on Linux, but the actual wordpress site thats installed within it. Food for thought: 83% of hacked websites in 2017 were Wordpress sites. Source: https://sucuri.net/reports/2017-hacked-website-report https://sucuri.net/reports/2017-hacked-website-report
1337shadow 8y ago
If you're happy with namecheap you will be delighted with bookmyname imho

christophilus 8y ago

GoDaddy is the Oracle of web hosting companies. I don’t understand their popularity, yet it seems to be going strong. Why is that? (Serious question, not rhetorical.)

SteveNuts 8y ago
I would guess it's their marketing that helps. They're one of the few with prime-time TV commercials.
swebs 8y ago
Advertising. I remember seeing tons of not-quite-porn ads from them even during superbowls.
- 3dfan 8y ago
  Are they profitable?
  - therealdrag0 8y ago
    $139.8 million net income in 2017.
- collinmanderson 8y ago
  They stopped those fall 2013.
  - TheCoelacanth 8y ago
    So, long after those ads had made them a household name?
  - foob 8y ago
    That's quite specific. Do you know what the impetus for them to stop was?
    - 8y ago