Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Namecheap announces support for TOTP-based 2FA

namecheap.com

Post reply on HN
Print view View original

1–10 of 27 posts

Re: Namecheap announces support for TOTP-based 2FA

#4

Post by NamecheapCEO »

philfrasty wrote: post #3
EvanAnderson wrote: post #2

It's about time. This has been a wish list item for years. They had a proprietary 2FA option but that was a non-starter for me.

Any idea why companies would choose a proprietary 2FA solution? I see this with European banks all the time.

Honestly, we seriously dropped the ball trying something new. It was a mistake on my part and a bad decision looking back. I posted about it on our blog here https://www.namecheap.com/blog/true-totp-2fa-and-u2f-are-com...

Re: Namecheap announces support for TOTP-based 2FA

#5

Post by cbluth »

NamecheapCEO wrote: post #4
philfrasty wrote: post #3

Earlier quoted context omitted.

Any idea why companies would choose a proprietary 2FA solution? I see this with European banks all the time.

Honestly, we seriously dropped the ball trying something new. It was a mistake on my part and a bad decision looking back. I posted about it on our blog here https://www.namecheap.com/blog/true-totp-2fa-and-u2f-are-com...

I want to let you know that your previous 2FA was so awful that I had to turn it off. I had Project FI service, and ported my number back to google voice, which permanently locked me out of my namecheap account. I contacted support for help, but by the time they had responded, I had already lost my opportunity on responding to a gig.

This is probably the worst place to air a grievance like this, but it seemed like my frustrations had fallen on deaf ears. I haven't bought a domain from namecheap since.

Re: Namecheap announces support for TOTP-based 2FA

#6

Post by krrrh »

NamecheapCEO wrote: post #4
philfrasty wrote: post #3

Earlier quoted context omitted.

Any idea why companies would choose a proprietary 2FA solution? I see this with European banks all the time.

Honestly, we seriously dropped the ball trying something new. It was a mistake on my part and a bad decision looking back. I posted about it on our blog here https://www.namecheap.com/blog/true-totp-2fa-and-u2f-are-com...

I was one of the people who wrote long support requests to you guys detailing how much I disliked the system you had in place. I really respect your forthrightness here.

Re: Namecheap announces support for TOTP-based 2FA

#7

Post by NamecheapCEO »

cbluth wrote: post #5
NamecheapCEO wrote: post #4

Earlier quoted context omitted.

Honestly, we seriously dropped the ball trying something new. It was a mistake on my part and a bad decision looking back. I posted about it on our blog here https://www.namecheap.com/blog/true-totp-2fa-and-u2f-are-com...

I want to let you know that your previous 2FA was so awful that I had to turn it off. I had Project FI service, and ported my number back to google voice, which permanently locked me out of my namecheap account. I contacted support for help, but by the time they had responded, I had already lost my opportunity on responding to a gig. This is probably the worst place to air a grievance like this, but it seemed like my…

Thanks for the feedback I appreciate it and I am very sorry to hear about your experience. While I can't go back and change what happened, I want to let you know we recognize the mistakes we've made and I can assure you we are committed to learn from them going forward. I hope one day you'll make it back.

Re: Namecheap announces support for TOTP-based 2FA

#8

Post by philtar »

Their old one was so bad I actually learned how to use route 53 just to migrate out of it.

Their CEO is just pretending to be forthright here. I have a tweet where he replied to me from February 2014 that said Google Auth support is coming in a couple of months.

This all happened because I got locked out of my namecheap account when THEIR system wouldn't sms me the code and they had problems with the voice calling.

So I emailed support. They called me 5 hours later to ask me a bunch of questions. Here's the funny part: they called me on the number I had used for 2FA. Isn't the fact that I answered that number proof enough that I had it?

Everything they do is half assed including their Frankenstein panel that's a mix of their old interface and their new one.

Anyway. Good riddance. Only use namecheap if you can't afford the $1 it costs to host your dns on route53.

Re: Namecheap announces support for TOTP-based 2FA

#9

Post by Fej »

NamecheapCEO wrote: post #4
philfrasty wrote: post #3

Earlier quoted context omitted.

Any idea why companies would choose a proprietary 2FA solution? I see this with European banks all the time.

Honestly, we seriously dropped the ball trying something new. It was a mistake on my part and a bad decision looking back. I posted about it on our blog here https://www.namecheap.com/blog/true-totp-2fa-and-u2f-are-com...

Sorry for the thread hijack, but:

Let's Encrypt. Ever going to roll it out?

I plan to switch away from Namecheap soon unless it's implemented, it's really disappointing to me.

Re: Namecheap announces support for TOTP-based 2FA

#10

Post by NamecheapCEO »

krrrh wrote: post #6
NamecheapCEO wrote: post #4

Earlier quoted context omitted.

Honestly, we seriously dropped the ball trying something new. It was a mistake on my part and a bad decision looking back. I posted about it on our blog here https://www.namecheap.com/blog/true-totp-2fa-and-u2f-are-com...

I was one of the people who wrote long support requests to you guys detailing how much I disliked the system you had in place. I really respect your forthrightness here.

Thank you, I need to explicitly call out our/my shortcomings if we want to improve as a company going forward. We are making big changes to the way we are doing things and a commitment to full transparency and having open and honest conversations with our customers are the biggest of those.
Post reply on HN