Live data from Hacker News

Google Domains blocking all Gitbook URLS: post-mortem

blog.gitbook.com

181–189 of 189 posts

Re: Google Domains blocking all Gitbook URLS: post-mortem

#181

A month or so ago, I was setting up a new system for writing internal-ish documentation and made the rather unpopular decision to not go with Gitbook because it was too reliant on their servers for my taste. Today, I got to send a very satisfying "told you so" the the team chat. To be clear, I think the Gitbook team actually handled this very well and it wasn't their fault, but it does illustrate very clearly why we…

I’m surprised how few people in this space aren’t packaging their apps up for on-prem customers.

* Fewer security and compliance hurdles when its on our own infra.

* Perfect uptime because it’s our responsibility. (Not saying we’re better but outages are our fault and don’t make you look bad)

* Fewer hurdles when integrating LDAP and friends. There’s no need for the weird “connectors” that companies come up with.

* We’ll pay you more for the privilege of hosting it ourselves.

* Giving us access to the code in a shared source model buys you an extreme amount of lock-in since once we start tweaking our fork for our needs we’re not leaving.

* The support burden is higher, sure but if it’s your most expensive enterprise tier you’ll almost always be working with a professional IT team.

* We’re the easiest crowd to up sell and we’ll even pay you to develop features you can sell to other people.

I don’t want to make it seem like selling in enterprise isn’t a slog but it’s a good business to be in.

Re: Google Domains blocking all Gitbook URLS: post-mortem

#183

Aside from the Google domain issue (which is obviously a problem) -- why on earth would GitBook be hosting user-generated content under their corporate gitbook.com domain? The registrar issue is one problem here -- but I don't see this addressed in their post-mortem. I thought this was a well-known issue. You don't host user-generated content on the same domain that handles your corporate email. Because things like t…

why on earth would GitBook be hosting user-generated content under their corporate gitbook.com domain? You mean like news.ycombinator.com, nytimes.com, facebook.com or most blogs or forums ever created? Also their entire business is serving user domains so if that goes down customers don't care about their marketing site, though the email vanishing would be annoying. What's to stop google doing this with any regular…

Facebook uses fb.com as their corporate domain.

Re: Google Domains blocking all Gitbook URLS: post-mortem

#184
post #109

You know, this is interesting. Google is taking something close to an editorial stance here - it is clear that they take action against their customers based on content on their sites. Some might consider that sites with controversial content who use Google as their registrar and not taken down are considered reviewed-and-OK by Google. Others might start pressuring Google to expand the nature of content they find una…

Phishing is not "controversial." It's illegal, and it undermines the principle of informed consent that meaningful freedom requires. Even if Google isn't legally obligated to take down phishing domains, I refuse to be so anal as to complain about it. It is everybody's job to make the internet safe and usable. Too bad Google does a terrible job of it. No way am I signing up for a Google Domain in the future.

The point is not whether it is reasonable to do so or not; I agree that phishing sites should go.

The point is that there is a large lobby out there for knocking different types of content offline, and they don't show much concern for whether their demands also seem reasonable.

Most registrars feel they should not be in the content policing or law enforcement business. Google volunteering to do it in one area that makes sense opens the door for pressure to do it in other areas that make less sense.

Re: Google Domains blocking all Gitbook URLS: post-mortem

#185
post #174
post #170

Earlier quoted context omitted.

How did you arrive at choosing Cloudflare? It's clear Google Domains has broken processes not conducive to running a business centered on user content. How do you know Cloudflare does not suffer from similar broken processes?

I doubt CloudFlare Registrar would be better in terms of customer support—unless said customer has an Enterprise plan—as their prices are just the registry + ICANN fee, no surcharge for them to make money. Doesn't seem conducive to great customer support, but maybe I'm wrong cause I've never had to contact them.

Two years ago, support for paid (peanuts-level, $20/mo?) plan was... not great.

Re: Google Domains blocking all Gitbook URLS: post-mortem

#186
post #144

Earlier quoted context omitted.

According to whois, google.com, amazon.com, github.com, microsoft.com, netflix.com, reddit.com, baidu.com, youtube.com, twitch.tv and wikipedia.org all use MarkMonitor [1] apple.com, twitter.com and ocado.com use CSC Corporate Domains [2] I have no idea what such services charge, but they're all "call for pricing" and none of those companies would blink at spending $10k/year on their domains. Not every well known bra…

At my last job, we called MarkMonitor after NetworkSolutions' lack of admin security got our domain hijacked. I don't remeber the prices exactly, and I'm sure they've changed, but from what I recall, the per domain year prices were about 10x normal prices, like $100/year for .com, but they also had a mininum annual spend of I think $10k/year; to get the 'super lock' domain service was about $1000/year available on a…

> and I'm sure they've changed

How recent is your experience with MarkMonitor?

Re: Google Domains blocking all Gitbook URLS: post-mortem

#187

Earlier quoted context omitted.

According to whois, google.com, amazon.com, github.com, microsoft.com, netflix.com, reddit.com, baidu.com, youtube.com, twitch.tv and wikipedia.org all use MarkMonitor [1] apple.com, twitter.com and ocado.com use CSC Corporate Domains [2] I have no idea what such services charge, but they're all "call for pricing" and none of those companies would blink at spending $10k/year on their domains. Not every well known bra…

Google.com doesn't even use Google Domains....that is telling right there.

Not really useful when talking about companies like Google. They also don't use Kubernetes...

Re: Google Domains blocking all Gitbook URLS: post-mortem

#189

GitBook CTO here: Our production domains (gitbook.com and gitbook.io) have been blocked and locked by our registrar (Google Domains). None of our infrastructure is impacted, all user content and databases are safe; our domains simply blocked by a heavy handed policy. As mentioned on Twitter, we are all hands working with Google to fix this issues ASAP. We'll then share an in-depth post-mortem https://twitter.com/GitB…

Do you use SPF and DMARC for your domain? You could have received instant reports to take actions sooner.
Post reply on HN