3 ms·
If you lose your domain, spreading bad software is the least of your concerns. They can reset all email passwords and access every service you’ve ever used.
by earthboundkid 6y ago
If you lose your domain, spreading bad software is the least of your concerns. They can reset all email passwords and access every service you’ve ever used.
- reificator 6y ago> If you lose your domain, spreading bad software is the least of your concerns. But if you lose your domain spreading bad software is the top of my concerns.
- earthboundkid 6y agoEither the package manager site allows email resets and the same issue applies, or it doesn’t and you can be locked out forever by forgetting a password. Both failure modes suck.
- reificator 6y agoYou're still assuming the domain owner's participation. How many domains lapse while the owner is active and responsive in the community?
- earthboundkid 6y agoYou just agreed with my original point that outsourcing identity to DNS/TLS is a good practice!
- dragonwriter 6y ago> If you lose your domain, spreading bad software is the least of your concerns. OTOH, it's probably higher on the list of downstream code users’ lost of concerns. > They can reset all email passwords and access every service you’ve ever used Not if you dealt with all that before letting the domain lapse. And if you don't, more to the point, that's your problem, but not the package manager user communities problem. And that it is a bigger concern of yours than the impacts on the package manager user community is exactly why that community might want to protect themselves from you neglecting their concerns..