Live data from Hacker News

Tell HN: Never search for domains on Godaddy.com

news.ycombinator.com

11–20 of 751 posts

Re: Tell HN: Never search for domains on Godaddy.com

#12
post #7
post #4

Earlier quoted context omitted.

I wonder if they have any logarithms that would attack this vulnerability? Someone could write a script to simply search several times for 1000's of names and bankrupt godaddy...

Their domain cost as a registrar is a fraction of retail pricing.

No it's not. GoDaddy has to pay the domain registry (verisign, donuts , etc) for the registration plus a small fee to ICANN. Domains are typically extremely low margin and profit is made up on add-ons.

Re: Tell HN: Never search for domains on Godaddy.com

#16
Wow, this is a blast from the past. I know Godaddy got busted doing this years ago. I forget whether they were sued or just hounded with bad P.R. but I thought they promised to clean up their act. I wish I could find the article now, but Google only pulls up stuff from the last year or so.

Re: Tell HN: Never search for domains on Godaddy.com

#19
post #11

Is there a safe method to search for domains?

Yes, asking for the SOA record for the zone within the parent domain is safe and usually good enough -- and will tell you if it is registered (but not definitively if it is NOT registered). Following up with a single normal WHOIS.

Re: Tell HN: Never search for domains on Godaddy.com

#20
Some TLD registries have policies to prevent registrars from front-running their clients by squat-registering their domain searches.

But, if you're working in a TLD where Freedom is more important than actual free markets, do your domain checks against the root servers yourself with dig +trace.

Post reply on HN