4 ms·
Nice blog post. I made a similar switch, but in the back of my mind I worry that I’ve introduced a new risk factor, since it’s much more likely for my custom do
by lemoncucumber 5y ago
Nice blog post. I made a similar switch, but in the back of my mind I worry that I’ve introduced a new risk factor, since it’s much more likely for my custom domain to get hijacked than gmail.com.
See for example this story of someone’s Twitter account getting stolen via a social engineering attack on their registrar: https://arstechnica.com/information-technology/2014/01/picking-up-the-pieces-after-the-n-twitter-account-theft/ https://arstechnica.com/information-technology/2014/01/picki...
A Google search suggests that setting up a registry lock could be an additional layer of defense against these types of attacks.
Have you done anything to guard against this type of attack?
- justusthane 5y agoThanks! And no, I have to say I hadn't really considered that angle. In the example that you linked, they didn't steal the domain, they just changed the MX records, so transfer lock wouldn't help. That being said, my account with my registrar is 2FA-enabled and I do have transfer lock turned on. I hope that someone wouldn't be able to social engineer their way into my Hover account, but who knows. Maybe I just mention this in a footnote.