Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Gandi March 9, 2025 incident postmortem

news.gandi.net

Post reply on HN
Print view View original

51–60 of 60 posts

Re: Gandi March 9, 2025 incident postmortem

#51

Post by sombragris »

rom16384 wrote: post #36
sombragris wrote: post #25

Earlier quoted context omitted.

I am transferring all my domains away from them. This is too much of a hike.

What registar do you recommend? I used Gandi because it was a no-nonsense registar, even if a bit more expensive.

I'm using now a Tucows reseller via eNom.com. So far, it's good although it does not accept my preferred credit card; I had to resort to my debit card for payment (same operator, same issuer bank; go figure). Gandi did not have that kind of issues but then, a 300% price hike certainly made me run from them.

Re: Gandi March 9, 2025 incident postmortem

#52

Post by wyan »

kgwxd wrote: post #8
jsheard wrote: post #2

Does anyone here even use Gandi anymore since they got acquired and hiked their prices to the moon? They want $40/year for a .com now, it's absurd.

I was just about to grab a few domains so, of course, my previous go-to has since turned to poop. Are there any good registrars left and, if so, who?

OVH is pretty fairly priced, includes the DNS zones, and is EU based

Re: Gandi March 9, 2025 incident postmortem

#53

Post by someotherperson »

nicoburns wrote: post #50
someotherperson wrote: post #41

Earlier quoted context omitted.

But their ethics are rock bottom. So maybe use of the many competitors mentioned here instead of giving money to this outfit.

Do you have more information on this? First I've heard of this.

It's been going on for years. I've personally tried to report phishing scams to Namecheap and get the laziest action on it (for example, I report 30 domains, and only one gets taken down and the rest + the account stay active) or totally ignored altogether after one or two exchanges. This laziness in response despite their platform being abused this heavily suggests they don't want to give up the revenue they're getting from it. The CEO is incredibly defensive about it and suggests that the security theater is evidence that they actually want to do something, but it's been years and they're still heavily used. This is despite not being the cheapest out there, which suggests that scammers prefer it for other reasons.

https://www.reddit.com/r/NameCheap/comments/1duy4cn/constant...

https://news.ycombinator.com/item?id=30603615

https://shkspr.mobi/blog/2021/05/why-do-scammers-love-namech...

And last but not least: https://www.theregister.com/2021/05/10/ncsc_active_cyber_def...

Re: Gandi March 9, 2025 incident postmortem

#55

Post by pinebox »

srhngpr wrote: post #44
kettleballroll wrote: post #5

Earlier quoted context omitted.

What alternative can you recommend?

Piggybacking on this comment, what about alternatives for good/basic shared hosting? (i.e., PHP, MySQL, etc.) I've got a few WP sites that I maintain where I need keep something reliable, secure/trusted, and relatively low-cost.

nearlyfreespeech.net

Re: Gandi March 9, 2025 incident postmortem

#56

Post by urtrs »

ziml77 wrote: post #21
jsheard wrote: post #2

Does anyone here even use Gandi anymore since they got acquired and hiked their prices to the moon? They want $40/year for a .com now, it's absurd.

Is price the only negative about them? I know the sentiment around Gandi here is negative, but the one time I needed to handle a domain issue recently they were super quick on the support. The problem was even my fault for messing up the ID info I'd provided (requirement of the registry for that TLD), but they got me back up and running 20 minutes after I sent their legal team the corrected info.

I asked for the authorization code to transfer my domain as it would not appear anywhere. They replied after 10 days. Also the code was wrong.

Re: Gandi March 9, 2025 incident postmortem

#57

Post by homebrewer »

arcanemachiner wrote: post #43
homebrewer wrote: post #37

Earlier quoted context omitted.

Cloudflare sells domains at cost, if you can stomach them.

Porkbun is cheap as well, and has the bonus feature of not being Cloudflare.

They use cloudflare for DNS, so you'll have to provide your own DNS servers or buy them from somebody else.

Re: Gandi March 9, 2025 incident postmortem

#58

Post by whoisyc »

jsheard wrote: post #2

Does anyone here even use Gandi anymore since they got acquired and hiked their prices to the moon? They want $40/year for a .com now, it's absurd.

A quick whois lookup of ycombinator.com returned the following:

   Domain Name: YCOMBINATOR.COM
   Registry Domain ID: 147225527_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.gandi.net
   Registrar URL: http://www.gandi.net
   Updated Date: 2025-02-14T02:53:36Z
   Creation Date: 2005-03-20T23:51:07Z
But yes, I would not use Gandi in 2025, unless someone is pointing a gun at my head and making me choose between Gandi and GoDaddy...

Re: Gandi March 9, 2025 incident postmortem

#59

Post by arcanemachiner »

homebrewer wrote: post #57
arcanemachiner wrote: post #43

Earlier quoted context omitted.

Porkbun is cheap as well, and has the bonus feature of not being Cloudflare.

They use cloudflare for DNS, so you'll have to provide your own DNS servers or buy them from somebody else.

interesting. Thanks for the heads up.

Re: Gandi March 9, 2025 incident postmortem

#60

Post by genewitch »

kemotep wrote: post #45
genewitch wrote: post #35

Earlier quoted context omitted.

I used to pay $5/yr for fastmail but that plan is now $15/yr, but I only get 0.5GB of storage. So it's like $1.05/month!

I pay $5 a month (50 a year technically) for fastmail and get a 50 gb mailbox and 10 gb cloud storage. How old is your account?

at least 10 years or so, i think. I'm grandfathered in to the real cheap plan, even though it "tripled" in price in 2020 or so. I can only have one domain, but i get all the other features.
Post reply on HN