undefined | Better HN

0 pointsAlyssaRowan11y ago0 comments

The dealbreaker for us with NameCheap/eNom is simple: still no DNSSEC.

It's been how many years now? And all they say is "we're working on it" and have no ETA. So we moved most things to Gandi.

Feels good having no GoDaddy, however.

0 comments

tptacek11y ago

Seriously? I'm surprised to see you of all people write that. No DNSSEC is a feature, not a bug.

ademarre11y ago

Care to elaborate on DNSSEC? I've been interested in seeing wider adoption of DNSSEC for things like DANE.

tptacek11y ago

DANE is a replacement for the CA system that effectively cedes cryptographic control of most of the Internet to world governments.

1 more reply

ryanlol11y ago

Asking the compromised DNS server if it's been compromised is a really good way to find out if it's been compromised.

danyork11y ago

I agree with you AlyssaRowan. I also moved some domains away from NameCheap/eNom when they didn't provide DNSSEC support.

I did move a couple of domains to Google Domains. While they do not provide DNSSEC in their DNS hosting, they do support DNSSEC records (DS) if you host your domains somewhere else that supports DNSSEC signing.

ryanlol11y ago

Why bother? DNSSEC is hardly useful in real life anyway.

j / k navigate · click thread line to collapse

0 pointsAlyssaRowan11y ago0 comments

The dealbreaker for us with NameCheap/eNom is simple: still no DNSSEC.

It's been how many years now? And all they say is "we're working on it" and have no ETA. So we moved most things to Gandi.

Feels good having no GoDaddy, however.

0 comments

tptacek11y ago

Seriously? I'm surprised to see you of all people write that. No DNSSEC is a feature, not a bug.

ademarre11y ago

Care to elaborate on DNSSEC? I've been interested in seeing wider adoption of DNSSEC for things like DANE.

tptacek11y ago

DANE is a replacement for the CA system that effectively cedes cryptographic control of most of the Internet to world governments.

1 more reply

ryanlol11y ago

Asking the compromised DNS server if it's been compromised is a really good way to find out if it's been compromised.

danyork11y ago

I agree with you AlyssaRowan. I also moved some domains away from NameCheap/eNom when they didn't provide DNSSEC support.

ryanlol11y ago

Why bother? DNSSEC is hardly useful in real life anyway.

j / k navigate · click thread line to collapse