5 ms·
What registrar do people recommend these days for domain registration that's (more?) secure against domain theft attack vectors? Namecheap? Gandi? MarkMonitor?
by idorosen 6y ago
What registrar do people recommend these days for domain registration that's (more?) secure against domain theft attack vectors? Namecheap? Gandi? MarkMonitor? One of the cloud providers?
- ampdepolymerase 6y agoI don't think MarkMonitor is for casual domain owners.
- jsharkey 6y agoNamecheap is excellent and they have solid YubiKey support. Plus whois privacy proxy service included for free.
- EvangelicalPig 6y agoI've been concerned about NameCheap since this alleged incident occurred https://news.ycombinator.com/item?id=18063667 https://news.ycombinator.com/item?id=18063667
- axaxs 6y agoI use and like Gandi. If you're worried about social engineering though, I'd probably go Google since they would be the hardest for someone to get ahold of.
- grapehut 6y agoI had my domain taken over while on Gandi. Interestingly they didn't do it via customer support, but instead were directly in contact with Gandi's legal department. Their legal guys approved the request/order without thinking to actually verify anything at all. Funnily enough, I had way more trouble getting my domain back than the people who stole it. As far as I can tell, Google, Cloudflare and Namecheap are really the only guys in town that don't fall for stupid shit.
- EvangelicalPig 6y agoHow long ago was this, roughly? I've heard of past concerns about some of Gandi's internal procedures and even ignoring that, they've been acquired by a venture capital firm of sorts.
- YetAnotherNick 6y ago> I'd probably go Google since they would be the hardest for someone to get ahold of. If customers can't reach the support centre, neither can scammers.
- johnisgood 6y agoI can vouch for Gandi.
- LordAtlas 6y ago> I'd probably go Google since they would be the hardest for someone to get ahold of An excellent case of "it's a feature, not a bug".
- gruez 6y agoI heard google's lack of customer support is a feature when it comes to security.
- grapehut 6y agoIt's a meme, but not exactly true. Google has terrible customer support. And has great security. But the great security actually comes from actually very good policies, and have a fantastic "advanced protection" service for people who are targeted. I was targeted extensively and purely from social engineering they managed to trick: A) Apple B) Amazon (AWS) C) Gandi Into handing over my accounts. Companies that stood up fine and were targeted: A) Google B) Namecheap C) Cloudflare D) Facebook
- deleted 6y ago[deleted]
- markdown 6y agoCloudflare has the best domain prices. They sell domains at wholesale rates.
- srockets 6y ago“Only domains Active at Cloudflare via a Full setup (Cloudflare hosts the authoritative DNS) are eligible for Cloudflare Registrar”[0] -- [0] https://support.cloudflare.com/hc/en-us/articles/360019910671-Transferring-and-renewing-domains-with-Cloudflare-Registrar https://support.cloudflare.com/hc/en-us/articles/36001991067...
- Shared404 6y agoCurrently using Porkbun, no complaints thus far.
- Gigablah 6y agoiwantmyname is solid, been using them for over 5 years.
- petecooper 6y ago50:50 split between Porkbun and Gandi.
- Ir0nMan 6y agoI like NameSilo. Cheap prices, simple non bloated interface, free privacy, and 2FA.
- LinuxBender 6y agoMarkMonitor for businesses and large organizations. They have a lot of resources that can work with your legal team if domain legal issues crop up. They also have a legal presence in multiple countries that require you to have a local presence to get their ccTLD. They can super-lock domains so that if someone manages to change the root servers, they can instantly change it back unless a processes that you define is followed.
- CydeWeys 6y ago> They can super-lock domains so that if someone manages to change the root servers, they can instantly change it back unless a processes that you define is followed. If you're referring to registry lock, that's not exactly how it works. It prevents said changes in the first place rather than merely reverting them; all changes have to go through an enhanced, manually verified, known-human-to-known-human change process. This is what e.g. google.com uses.
- LinuxBender 6y agoThey sell a service that goes beyond registry lock.
- CydeWeys 6y agoDo you have a link with more info?
- ficklepickle 6y agoYou can use mark monitor if you want to spend a bajillion dollars. They are meant for big brands with big budgets.