5 ms·

I mean normally anyone can pay to extend a domain registration so it’s not that crazy a question.

by eli 4y ago

ethanbond 4y ago
Normally people can pay to extend their domain registration.
- ocdtrekkie 4y ago
  I mean, most banks don't require ID to make a deposit. It's not an unrealistic thought that someone should be able to top up some dude's account so that his stuff can autorenew. Though a company would need some sort of explicit policy for that more than likely.
  - ethanbond 4y ago
    Sure, if the original contract had a clause that said “anyone can come add money to this and if they do, go ahead and extend it under my name” then this would be entirely reasonable. It seems that clause doesn’t exist here or at least GoDaddy isn’t required to exercise it.
  - baobob 4y ago
    This hasn't been true in the UK for at least a few years now
  - jeremymcanally 4y ago
    > I mean, most banks don't require ID to make a deposit. Due to money laundering regulations, that isn't really true anymore. Most banks straight up won't take cash deposits into someone else's account, identification or not. Other means (ACH, etc.) require KYC from the originating institution. I'm not sure about secure funds like a money order, but I'm guessing they'd be subject to some sort of verification as well.
    - jefftk 4y ago
      At my bank, if you fill out a deposit bag with the account number and put in cash, you can drop it in the deposit slot and it shows up in the account. There is no verification that you own the account, beyond knowledge of the account number.
- witheld 4y ago
  No, usually you can renew a domain for anyone without authentication
  - JohnHaugeland 4y ago
    uh. what?
    - euroclear 4y ago
      I'm not sure about Godaddy, but on Gandi you can definitely pay to extend someone else's domain name. https://docs.gandi.net/en/domain_names/renew/how_to_renew.html https://docs.gandi.net/en/domain_names/renew/how_to_renew.ht...
      - JohnHaugeland 4y ago
        That's wild. I had had no idea.
    - andreareina 4y ago
      Happened to microsoft: https://slashdot.org/story/99/12/25/114201/microsoft-hotmailpassport-service-interruptedupdated https://slashdot.org/story/99/12/25/114201/microsoft-hotmail...
      - maccard 4y ago
        Thats not the same thing. The domain lapsed and someone else bought it, which is exactly what is going to happen to eth.link according to this post.
        andreareina 4y ago
        From the horses mouth: > I read through the discussion area for that story and found that the problem had been tracked down to an outstanding invoice for passport.com at Network Solutions, the domain name registrar. > I own a number of domains myself, including doublewide.net, so I'm no stranger to the payment system at Network Solutions. I went to the payment page at https://payments.networksolutions.com https://payments.networksolutions.com and typed in "passport.com", after which I was greeted with a page showing the outstanding invoice for $35. One of the buttons near the bottom of the page was "Make payment", so I pressed it. https://web.archive.org/web/20031002153020/http://www.doublewide.net/ https://web.archive.org/web/20031002153020/http://www.double...
- eli 4y ago
  I’ve done it for other people multiple times. Not sure about godaddy though.
  - tomlogic 4y ago
    It's not the case with GoDaddy. I just had a hosting client run into this a few weeks ago -- someone they know had registered their domain for them long ago, and they didn't have the GoDaddy login. I tried to help out when their domain expired and spoke to GoDaddy support. They do not provide any way to renew domain without logging into the account that owns the domain. They were fortunately able to get in touch with the person who originally registered it, so that person could renew it and work on transferring it to an account controlled by the true "domain owner". I personally don't see a security issue with allowing anyone to renew any domain. It's not like you can change WHOIS information or the authoritative name servers -- you're just paying to continue with the existing ownership/configuration.

I mean normally anyone can pay to extend a domain registration so it’s not that crazy a question.

by eli 4y ago

I mean normally anyone can pay to extend a domain registration so it’s not that crazy a question.

ethanbond 4y ago

Normally people can pay to extend their domain registration.

ocdtrekkie 4y ago
I mean, most banks don't require ID to make a deposit. It's not an unrealistic thought that someone should be able to top up some dude's account so that his stuff can autorenew. Though a company would need some sort of explicit policy for that more than likely.
- ethanbond 4y ago
  Sure, if the original contract had a clause that said “anyone can come add money to this and if they do, go ahead and extend it under my name” then this would be entirely reasonable. It seems that clause doesn’t exist here or at least GoDaddy isn’t required to exercise it.
- baobob 4y ago
  This hasn't been true in the UK for at least a few years now
- jeremymcanally 4y ago
  > I mean, most banks don't require ID to make a deposit. Due to money laundering regulations, that isn't really true anymore. Most banks straight up won't take cash deposits into someone else's account, identification or not. Other means (ACH, etc.) require KYC from the originating institution. I'm not sure about secure funds like a money order, but I'm guessing they'd be subject to some sort of verification as well.
  - jefftk 4y ago
    At my bank, if you fill out a deposit bag with the account number and put in cash, you can drop it in the deposit slot and it shows up in the account. There is no verification that you own the account, beyond knowledge of the account number.
witheld 4y ago
No, usually you can renew a domain for anyone without authentication
- JohnHaugeland 4y ago
  uh. what?
  - euroclear 4y ago
    I'm not sure about Godaddy, but on Gandi you can definitely pay to extend someone else's domain name. https://docs.gandi.net/en/domain_names/renew/how_to_renew.html https://docs.gandi.net/en/domain_names/renew/how_to_renew.ht...
    - JohnHaugeland 4y ago
      That's wild. I had had no idea.
  - andreareina 4y ago
    Happened to microsoft: https://slashdot.org/story/99/12/25/114201/microsoft-hotmailpassport-service-interruptedupdated https://slashdot.org/story/99/12/25/114201/microsoft-hotmail...
    - maccard 4y ago
      Thats not the same thing. The domain lapsed and someone else bought it, which is exactly what is going to happen to eth.link according to this post.
      - andreareina 4y ago
        From the horses mouth: > I read through the discussion area for that story and found that the problem had been tracked down to an outstanding invoice for passport.com at Network Solutions, the domain name registrar. > I own a number of domains myself, including doublewide.net, so I'm no stranger to the payment system at Network Solutions. I went to the payment page at https://payments.networksolutions.com https://payments.networksolutions.com and typed in "passport.com", after which I was greeted with a page showing the outstanding invoice for $35. One of the buttons near the bottom of the page was "Make payment", so I pressed it. https://web.archive.org/web/20031002153020/http://www.doublewide.net/ https://web.archive.org/web/20031002153020/http://www.double...
eli 4y ago
I’ve done it for other people multiple times. Not sure about godaddy though.
- tomlogic 4y ago
  It's not the case with GoDaddy. I just had a hosting client run into this a few weeks ago -- someone they know had registered their domain for them long ago, and they didn't have the GoDaddy login. I tried to help out when their domain expired and spoke to GoDaddy support. They do not provide any way to renew domain without logging into the account that owns the domain. They were fortunately able to get in touch with the person who originally registered it, so that person could renew it and work on transferring it to an account controlled by the true "domain owner". I personally don't see a security issue with allowing anyone to renew any domain. It's not like you can change WHOIS information or the authoritative name servers -- you're just paying to continue with the existing ownership/configuration.