3 ms·

I get occasional probes from Google services against my domain, clearly made by bad actors who are trying to break into it. It's not "lose your domain with a sl

by kabdib 2y ago

I get occasional probes from Google services against my domain, clearly made by bad actors who are trying to break into it. It's not "lose your domain with a slip of the finger" territory, but it's still not great. There doesn't appear to be a way to tell Google, "I own this domain, just block all of these bogus requests" other than signing up for the services in question (which I don't want to do!) Scammers will be scammers, but this is also pretty shitty behavior on Google's part.

kyrra 2y ago
What do you mean probing your domain from Google?
- HideousKojima 2y ago
  I assume trying to sign up for Google services (business email etc.) for his domain
  - kabdib 2y ago
    Exactly.
magicalhippo 2y ago
For Google and Microsoft, you have to add some TXT records to verify your domain. Surely they could add support for checking that TXT record to "anti-verify" the domain? Ie instead of the "MS=ms12345" value to verify with Microsoft, have some fixed "MS=NOJOY" or whatever to signal to Microsoft you don't want any registrations against your domain.
- bell-cot 2y ago
  Idea: DNS TXT records are free-form. What if you used those to publish some (very short) "Legal Notices", stating that certain things were not authorized, and should be assumed fraudulent? (Perhaps with similar notices published in your local old-school Legal News. There are entire periodicals devoted to the publication of legal notices.) It doesn't matter if it would fully stand up in court, if the existence of the published prior notices convinced Google or MS that they were risking a nasty Legal Dept. situation.
toast0 2y ago
When I was an admin for a Google Apps Domain, you couldn't even stop people from making a google account that aliases a google apps account. Best I could do was run reports and yell at people. But it really would have been nice to stop all attempts to make google accounts for the domain.
- kabdib 2y ago
  Exactly. Google's behavior here is terrible.

by kabdib 2y ago

kyrra 2y ago

What do you mean probing your domain from Google?

HideousKojima 2y ago
I assume trying to sign up for Google services (business email etc.) for his domain
- kabdib 2y ago
  Exactly.

magicalhippo 2y ago

For Google and Microsoft, you have to add some TXT records to verify your domain. Surely they could add support for checking that TXT record to "anti-verify" the domain? Ie instead of the "MS=ms12345" value to verify with Microsoft, have some fixed "MS=NOJOY" or whatever to signal to Microsoft you don't want any registrations against your domain.

bell-cot 2y ago
Idea: DNS TXT records are free-form. What if you used those to publish some (very short) "Legal Notices", stating that certain things were not authorized, and should be assumed fraudulent? (Perhaps with similar notices published in your local old-school Legal News. There are entire periodicals devoted to the publication of legal notices.) It doesn't matter if it would fully stand up in court, if the existence of the published prior notices convinced Google or MS that they were risking a nasty Legal Dept. situation.

toast0 2y ago

When I was an admin for a Google Apps Domain, you couldn't even stop people from making a google account that aliases a google apps account. Best I could do was run reports and yell at people. But it really would have been nice to stop all attempts to make google accounts for the domain.

kabdib 2y ago
Exactly. Google's behavior here is terrible.