Posted by sashk 5 hours ago
https://news.ycombinator.com/item?id=49028037
Namecheap banned a few domain names purely based on an ambiguous tweet that got 6 likes
https://x.com/Namecheap/status/1489485337885921284
Namecheap suspended Imgur in 2013 for 1 CSAM image out of millions
https://news.ycombinator.com/item?id=5276648
Namecheap snipes your domains
I'm planning to migrate out.
- Cloudflare
I've been waiting for the "porkbun screwed me" stories, but haven't seen any yet.
Big registrars can’t afford any support costs since they prefer to squeeze the price down as far as possible, and therefore they prefer to simply lose or outright drop any customer in case of any and all problems. Conversely, small registrars may charge more, but have better (i.e. actually existing, and sometimes even dedicated and personal) support for when things go wrong, and have a vested interest in keeping you as a customer.
A small registrar might also be so small as to know you personally, which will help monumentally against any social engineering attacks.
Full disclosure: I work at such a registrar, but you’re probably not in our target market.
Especially because domain names are not expensive anyways, a dot com (gold standard of domains) has a cost to registrars of like 11 USD right now, so registrars can charge anywhere between 15 USD and 25 USD, maybe you can find one selling at cost at 11USD or at a loss with promotions even!
But we are talking about saving 10$/year? That's less than 1$/mo. Trying to save 1$/mo is strictly in the terrain of underfunding your business, if you can't allocate enough funds so that Domain costs become a non-issue (and a provider like namecheap stops being attractive) then you will fail in a thousand ways, it's not just about domains at this point.
so costs need to go down (-human support + ai automation)
and prices go up (they increased i think .com 3 times this year alone)
Such acquisitions are often due to founders cashing out or retiring, and the first thing private equity does is switch gears to "extraction mode". As such, I would think twice before (a) making a long-term commitment to their services, or (b) spending time applying for a job there.
1) The registrar want to increase its margins.
2) The registry upstream increased their price. For .com, Verisign agreement with ICANN allow Verisign to increase the price by 7% in each of the final four years of every six-year cycle. As such they increased it in 2024 and will do so again on November 1, 2026.
3) The registrar is not a direct registrar and uses a middle man, and the middle man want to increase its margins.
4) The buyer or the registrar is operating on a different currency than the registry, and the registrar is compensating for changes in the currency valuation.
The first is a vampire looking to take what was publicly or even privately owned, extract every last dollar and leave the shell with the debt of buying the next victim.
Private Ownership is Valve or Porkbun - The people running the business want to make a profit but not to their own or their customers determent.
People mean "acquired by a Private Equity firm". You can learn what one of those is here: https://en.wikipedia.org/wiki/Private_equity_firm
Ya every time I installed a slightly involved CMS it was a broken headache for some technical reason, so I gave that up. Made my own superuninvolved CMS and that works fine.
Most websites don't use CAA records at all. The records can only narrow what CAs are acceptable down from the end user's root trust store, they can't add new CAs to it. And CloudFlare is typically in charge of managing its customers' certificates, so they add CAA records for their own CAs.
If you don't trust CF to manage your certs, you are not in their target market and generally should not use their products.
https://developers.cloudflare.com/ssl/reference/certificate-...
I purchased a domain name from them yesterday, in addition to a few I already had.
This will be the last purchase unless I see some significant traction in the case we're discussing in particular, and company wide in general.
Hope others will do the same. Not punishing this behavior is encouraging such abuse in the entire industry (if Namecheap gets away with that, everyone else will follow).
but "numbers guys" say no, we need squeeze profits short term..
If cloudflare gets mad at you (even accidentally) and cancels your account then you lose everything. At least if you separate them, there is a chance that you won’t lose access to both at one time. Given that domains are generally a one time setup after purchase (especially if you use cloudflare for DNS) then I think the minor inconvenience is worth it, personally.
Ahhh crap, there goes the company down the toilet. And they were the place I trusted to buy my domain names from.
These days I just use Cloudflare and Marcaría for stuff thats not available on Cloudflare. CF may not be the most trustful company out there, but it is nice to have everything in one ecosystem. Plus, you can deploy a site using their workers, so essentially you can go from domain name to website in 5 minutes including ssl and whatever else you can think of, including bot protection and good metrics.
Also found this list: https://www.forbes.com/advisor/business/software/best-domain...
Might be relevant for others looking for alternatives
There should probably be a deadpool board that lists all the registrars and lets people bet on which will be the last ones standing. I am going to guess a couple of the last ones standing (that still have something resembling technical staff) will be Amazon and Cloudflare and to be clear I did not say anyone can reach their technical staff.
Whatever the consensus will ultimately be in this thread this week will probably be registrars we perform libation for in the coming years.
The only downside is that they use Cloudflare DNS behind the scenes, so when Cloudflare goes down, your website goes down too unless you use third-party DNS.
You can always use third-party DNS if that's what you wish to do. That should be a supported configuration with ~any registrar (and if it isn't, avoid them).
You can run your own (first-party!) authoritative nameserver(s) for your domain, if you want to, and you can even do this on hardware that you can see and kick. A nameserver isn't particularly hard to set up in a sensible fashion.
However it happens, eliminating Cloudflare's DNS from the equation is easy. The TLD nameservers (for .com or .net or whatever) will cheerfully direct resolvers towards whatever nameserver(s) you specified as part of your domain registration.
After that, when Cloudflare DNS dies on any random Tuesday afternoon, your domain will still work. (Maybe it won't work for those using Cloudflare's 1.1.1.1, but those people may have bigger issues on that particular Tuesday.)
Edit: I feel that it's pertinent to point out one of these experiences that were particularly bad. About two years ago I tried to register an IDN (internationalized domain name) with them. The registration succeeded according to their interface. Money was deducted. The domain did not appear in my inventory. My support ticket took several days to receive attention and was just closed with the almost arrogant response, "you probably did some mistake", with no further information or support. My second support ticket, too, took several days to get a response, and it was then revealed that the problem was that they weren't capable of registering IDNs under that specific TLD, for unknown reasons. That support ticket was also closed without allowing me to respond, so I had to open a third ticket just to get my money back.
I know, Amazon isn't super cool, and are imperfect in a bunch of ways. But at least it appears to be highly configurable and cheap, and Amazon ain't gonna get bought out by private equity and enshittified, legally bullied into oblivion, generally has pretty good quality and competent support, and has plenty of experience in not handing the keys to your castle of services to any random phone caller with a sob story.
Since then, my domain's reputation has been affected, and I often get security warnings when trying to access my own website through my company's VPN.
Namecheap simply informed me that it had been a mistake, but the damage was already done, and the issue still persists.
I repeat. This was on Reddit. Consider what credibility there might be.