Re:Taking Over DigitalOcean Domains via a Lax Domain Import ...
by Dylan16807 on Friday August 26, 2016 @05:05AM
(#12365081)
What you just described as reasonable is not the scenario I asked about, which is just "pointing to someone else's nameservers".
If the domain is added to the account there is no PoC, it's only for domains that have been removed from accounts but still have the nameserver values(meaning the domain is not being used at this point, there's no zone file if it isn't added to an account).
So this is mostly only going to affect currently derelict domains. I'm not saying it isn't something to worry about, but I do think it's a reasonable solution.