Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google Domains Launches to All in U.S

techcrunch.com

Post reply on HN
Print view View original

111–120 of 248 posts

Re: Google Domains Launches to All in U.S

#111

Post by danyork »

tptacek wrote: post #94
ademarre wrote: post #74

Earlier quoted context omitted.

Care to elaborate on DNSSEC? I've been interested in seeing wider adoption of DNSSEC for things like DANE.

DANE is a replacement for the CA system that effectively cedes cryptographic control of most of the Internet to world governments.

No... DANE doesn't cede control to world governments.

DANE can work perfectly fine with the existing CA system to provide another way of verifying that the correct TLS certificate (or CA) is being used. Or... it can be used with a completely different trust anchor or TLS certificate that you control. Your choice.

But you and I will just have to disagree on this topic. Your dislike of DNSSEC is well-known, as is my support for it.

Re: Google Domains Launches to All in U.S

#112

Post by tptacek »

danyork wrote: post #111
tptacek wrote: post #94

Earlier quoted context omitted.

DANE is a replacement for the CA system that effectively cedes cryptographic control of most of the Internet to world governments.

No... DANE doesn't cede control to world governments. DANE can work perfectly fine with the existing CA system to provide another way of verifying that the correct TLS certificate (or CA) is being used. Or... it can be used with a completely different trust anchor or TLS certificate that you control. Your choice. But you and I will just have to disagree on this topic. Your dislike of DNSSEC is well-known, as is my su…

The USG controls .com, .net, and .org. The government of Libya controls .ly. DNSSEC puts cryptographic key material under the influence of the DNS. "No it doesn't" isn't a rebuttal to that.

Re: Google Domains Launches to All in U.S

#113

Post by Alex3917 »

mintplant wrote: post #41
Alex3917 wrote: post #3

It looks like CrunchBase may have gotten hacked. Their URL for Google points to a spam domain.

It's not doing that for me -- at least, it isn't right now, anyway. You might want to check your computer for malware.

I don't think so, I see it on both my work and home computers, both of which are running OS X. Also to clarify I'm talking about the CrunchBase widget on this TechCrunch article, not the entry on the actual Crunchbase website.

Re: Google Domains Launches to All in U.S

#115

Post by danyork »

AlyssaRowan wrote: post #9
wise_young_man wrote: post #6

Earlier quoted context omitted.

I started moving all of my domains back to NameCheap from Badger after they raised their prices to what Hover charges. The domain renewal with whois privacy/guard at NameCheap ends up being a little more than Google Domains. I keep hoping NameCheap will overhaul their control panel design like they did with their main site. I will probably end up moving to AWS Route53 or Google Domains or to use their DNS and a clean…

The dealbreaker for us with NameCheap/eNom is simple: still no DNSSEC. It's been how many years now? And all they say is "we're working on it" and have no ETA. So we moved most things to Gandi. Feels good having no GoDaddy, however.

I agree with you AlyssaRowan. I also moved some domains away from NameCheap/eNom when they didn't provide DNSSEC support.

I did move a couple of domains to Google Domains. While they do not provide DNSSEC in their DNS hosting, they do support DNSSEC records (DS) if you host your domains somewhere else that supports DNSSEC signing.

Re: Google Domains Launches to All in U.S

#116

Post by tedchs »

blissofbeing wrote: post #83

Does anyone know if the DNS servers you get with this are the same as the google cloud DNS[1] product? If so, buying your domain here could be worth it for the DNS alone, as they are anycast, DNSSEC enabled, and fairly fast[2]. 1: https://cloud.google.com/dns/docs 2: http://www.solvedns.com/dns-comparison/2014/12

Yeah, Google Domains runs your domain on Google Cloud DNS. My DNS servers are ns-cloud{1..4}.googledomains.com.

Re: Google Domains Launches to All in U.S

#117

Post by waylandsmithers »

Someone1234 wrote: post #13

None of Google Domain's features are novel. In fact the article spent most of its time talking about an up-sell. Which isn't to say Google Domain isn't a good product, just that we now should look at price because nothing else seems interesting... ~ Google Domains charges $12/year for .COM, .NET, .ORG. ~ NameCheap charges $10.69/year for .COM, $11.98/year for .NET, and $11.48/year for .ORG. Sometimes with an 18c/year…

Something about Google feels more trustworthy to me than all the other registrars, so that's new.

Re: Google Domains Launches to All in U.S

#118

Post by danyork »

tptacek wrote: post #112
danyork wrote: post #111

Earlier quoted context omitted.

No... DANE doesn't cede control to world governments. DANE can work perfectly fine with the existing CA system to provide another way of verifying that the correct TLS certificate (or CA) is being used. Or... it can be used with a completely different trust anchor or TLS certificate that you control. Your choice. But you and I will just have to disagree on this topic. Your dislike of DNSSEC is well-known, as is my su…

The USG controls .com, .net, and .org. The government of Libya controls .ly. DNSSEC puts cryptographic key material under the influence of the DNS. "No it doesn't" isn't a rebuttal to that.

But Thomas ... I still don't understand the attack that you say can be made against DNSSEC-signed domains. Here's what I see, if I have a .COM domain:

1. I sign my domains and generate a DS record.

2. I upload the DS record to my registrar who passes the DS record up to the .COM registry.

Now, when someone does DNSSEC validation on my DNS records, they wind up doing this process:

1. Going through the DNS process to get my DNS records as well as the DNSKEY and RRSIGs.

2. Following the chain of DS records up to the .COM registry and on up to the root of DNS... being able to validate along the way the integrity of the records.

Where do world governments get to interfere here?

If a govt were able to manipulate the TLD registry the best they could do would be to point my domain to some other name servers that weren't mine... is THAT the attack you see? I seriously would like to understand.

Re: Google Domains Launches to All in U.S

#119

Post by 27182818284 »

hayksaakian wrote: post #32
venomsnake wrote: post #8

Knowing first hand google support I will stick to namecheap ...

With first hand experience: - if you are paying google on an ongoing basis for something (adwords for example) they are very pro active with support. - if you are using a free product, expect 0 or less support - if you are receiving money from google, expect active hostility.

This has been very much my experience. With paid products I had a Google representative actually on the phone and then following up after to make sure I was set. That payment part is key, and not unexpected given the HUGE number of unpaid people using their service.

Re: Google Domains Launches to All in U.S

#120

Post by billconan »

Someone1234 wrote: post #13

None of Google Domain's features are novel. In fact the article spent most of its time talking about an up-sell. Which isn't to say Google Domain isn't a good product, just that we now should look at price because nothing else seems interesting... ~ Google Domains charges $12/year for .COM, .NET, .ORG. ~ NameCheap charges $10.69/year for .COM, $11.98/year for .NET, and $11.48/year for .ORG. Sometimes with an 18c/year…

it looks to me that google has run out of ideas.
Post reply on HN