News for hackers. Stuff that matters.
Re:Whois public database is in breach of GDPR, according to ... by Lunatic666 on Tuesday April 17, 2018 @06:37AM (#16857071)
Most of the whois hiding services cost money, so if I get this “service” for free now, I don’t have much sympathy with the whois guys.

If it’s about contacting people, they could make the abuse@ or webmaster@ address mandatory, then you can separate it from your normal email accounts, because the majority will be spam anyway.

Re:Whois public database is in breach of GDPR, according to ... by rkibbe on Tuesday April 17, 2018 @11:17AM (#16859097)
Google Domains includes private registration - no additional cost. The service is simple with transparent (although not the best) pricing. Have a few domains there now. And yes, I'm aware that Google and privacy are strange bedfellows in the same sentence.
Re:Whois public database is in breach of GDPR, according to ... by neya on Tuesday April 17, 2018 @11:21AM (#16859136)
I second Google domains. For some domains it's worth the money, for others not so much. But still, you get really good DNS and a really nice + simple interface and the fact that I don't need to remember another pair of username/password makes it well worth it.
Re:Whois public database is in breach of GDPR, according to ... by curun1r on Tuesday April 17, 2018 @11:59PM (#16864507)
I've been hesitant to use Google for services like this after hearing about incidents where Google disabled everything associated with a Google account after detecting some violation of their ToS. I'd hate to lose my domain name because I, say, used the Maps API in some way that Google didn't appreciate. Google needs to be better at siloing their products before I'd consider using them for something that mission critical.
Re:Whois public database is in breach of GDPR, according to ... by natch on Wednesday April 18, 2018 @11:39AM (#16868232)
>after detecting some violation of their ToS.

And often it's not a violation, it's an alleged, unspecified, un-counterable data point hidden in Google's cloud with no way for the user to determine what it might have been.

Re:Whois public database is in breach of GDPR, according to ... by test6554 on Tuesday April 17, 2018 @01:27PM (#16860386)
But who knows who really owns the domain? Google Knows Who...
Re:Whois public database is in breach of GDPR, according to ... by judge2020 on Tuesday April 17, 2018 @05:05PM (#16862321)
This is like saying that GoDaddy, Namecheap, or any of the countless number of other domain registrars own every domain registered with them. Performing a fraudulent transfer or DNS change would destroy their registry business and cause a PR nightmare.
Re:Whois public database is in breach of GDPR, according to ... by dustingetz on Tuesday April 17, 2018 @05:44PM (#16862578)
Yeah the shenanigans are caused by rock bottom price market (similar to airfare shenanigans)

I moved everything to AWS DNS and am super happy about it. Domains are mission critical, I'll pay double without blinking to know that my stuff isn't gonna be held ransom over some contrived baloney

Re:Whois public database is in breach of GDPR, according to ... by p49k on Wednesday April 18, 2018 @10:42AM (#16867757)
> to know that my stuff isn't gonna be held ransom over some contrived baloney

Like accidentally changing the name on a kindle to “baba”?

https://www.reddit.com/r/amazon/comments/5gvgdl/using_a_amaz...

Re:Whois public database is in breach of GDPR, according to ... by tracker1 on Tuesday April 17, 2018 @07:01PM (#16863059)
I'm currently using Google Domains for all of my domains... the really simple UX made the choice and lack of any in your face additional services was nice too.

Though, bulk editing would be nice, I'm about to move. :-( If anyone here works for google domains, it would be REALLY nice to be able to update all contact info on all domains at once.

Re:Whois public database is in breach of GDPR, according to ... by Operyl on Tuesday April 17, 2018 @07:22PM (#16863193)
I'm extremely surprised that they didn't offer some sort of API to it. I just spent the past 10 minutes looking to be sure, but that seems very unlike Google.
Re:Whois public database is in breach of GDPR, according to ... by themihai on Tuesday April 17, 2018 @08:58PM (#16863767)
>> but that seems very unlike Google.

Not really. Appengine for example didn't have an admin API until recently(and it's still quite limited).

Re:Whois public database is in breach of GDPR, according to ... by _o_ on Wednesday April 18, 2018 @02:09AM (#16865043)
Google is probably the last I would give my personal details, actually I would rather gave them to Facebook. Whois is bothering me exactly becoase of google and similar companies.
Re:Whois public database is in breach of GDPR, according to ... by amaccuish on Tuesday April 17, 2018 @10:31AM (#16858647)
Or offer an anonimiser service in place of your email, which just redirects to your actual email. Not everyone hosts email on their domain.
Re:Whois public database is in breach of GDPR, according to ... by apocalyptic0n3 on Tuesday April 17, 2018 @03:04PM (#16861289)
> If it’s about contacting people, they could make the abuse@ or webmaster@ address mandatory

What about domain owners like mysql who have no email attached to their domains? I only have two personal domains, but I have never had a need for an accounts to be associated with the domains nor do I think I would ever check it.

Perhaps have those two account DNS lookups always go through the registrar who then forwards to your account email? Even that doesn't seem very fool proof, though.

Re:Whois public database is in breach of GDPR, according to ... by nodesocket on Tuesday April 17, 2018 @04:47PM (#16862174)
AWS Route 53 domains also provides "private" whois for free included in the cost.

    .com are $12/year
    .net are $11/year
    .io are $39/year
Re:Whois public database is in breach of GDPR, according to ... by homero on Tuesday April 17, 2018 @05:39PM (#16862543)
I use Porkbun which has free privacy and the pricing is almost wholesale.
Re:Whois public database is in breach of GDPR, according to ... by nodesocket on Wednesday April 18, 2018 @03:53PM (#16870537)
.io domains are cheaper on AWS Route53 domains than Porkbun.

$39/year AWS Route53 and $47.68/year on Porkbun.

Re:Whois public database is in breach of GDPR, according to ... by kelnos on Tuesday April 17, 2018 @08:38PM (#16863670)
There's no need for this. The SOA DNS record of every domain already includes an email contact (more by convention than requirement, I think?). It's mildly annoying because they have to replace the '@' with a '.' due to limitations in what can be in the field, but it's pretty easy to extract the correct information.
Re:Whois public database is in breach of GDPR, according to ... by nabc45 on Tuesday April 17, 2018 @07:48AM (#16857426)
>Most of the whois hiding services cost money

Where? I never paid a dime

Re:Whois public database is in breach of GDPR, according to ... by fencepost on Tuesday April 17, 2018 @09:44AM (#16858193)
It's probably a question of whether the privacy features are separately charged or are bundled in a standard plan that's a bit higher priced than "bare" registration.

Since control panels, reputation, policies and other services like DNS are also things that can be bundled together, it's going to be difficult to say whether or how much you're paying for just the privacy component.

Re:Whois public database is in breach of GDPR, according to ... by ry_ry on Tuesday April 17, 2018 @08:07AM (#16857523)
123reg charge for whois privacy too, as do a bunch of other registrars.

Always felt like mild extortion.

Re:Whois public database is in breach of GDPR, according to ... by pc86 on Tuesday April 17, 2018 @08:33AM (#16857679)
Please do share the registrar that blocks all whois data for free!
Re:Whois public database is in breach of GDPR, according to ... by jcwayne on Tuesday April 17, 2018 @08:50AM (#16857768)
I've used Hover.com (owned by Tucows) for several years. In my opinion they are the anti-Godaddy. The things that should be free are and the extras are presented as just that. No trickery or beating you over the head with up-sales.
Re:Whois public database is in breach of GDPR, according to ... by corobo on Tuesday April 17, 2018 @09:34AM (#16858106)
Are they really free though if the price is higher than alternatives? Also the renewal costs look like they're mostly regcost + $2 for some reason
Re:Whois public database is in breach of GDPR, according to ... by jcwayne on Tuesday April 17, 2018 @10:53AM (#16858867)
The higher renewal charge is odd, I hadn't noticed that before. It's nothing like most of the TLDs, but it is nearly half of what they list [1] as trending.

That aside, I'm still glad to pay a little more for the overall better service. If they were charging anything like the old Network Solutions prices, that'd be a different matter.

[1] https://www.hover.com/domain-pricing

Re:Whois public database is in breach of GDPR, according to ... by corobo on Tuesday April 17, 2018 @11:46AM (#16859407)
Yeah in all honestly a couple extra $ wouldn't put me off using them, I was more wondering if there was a decent reason behind it. Having said that I'm paying almost $20/year less for my io domains at Namecheap, that one's a bit of a steep difference

Once a domain is registered all they need to do really is process auto-renew payments, notify me if my card was declined for any reason, and make sure it's kept registered at the registry.

Unfortunately in any case though I've stopped at the gate, they don't appear to have an API

Re:Whois public database is in breach of GDPR, according to ... by always_good on Tuesday April 17, 2018 @09:42AM (#16858171)
Whois privacy included in the price is still much better than having to remember to buy and renew the service per domain.
Re:Whois public database is in breach of GDPR, according to ... by corobo on Tuesday April 17, 2018 @11:47AM (#16859420)
Any registrar making money on whois privacy has an option and motive to autorenew the privacy with the domain. If anything Namecheap bugs me with it because I don't want whois privacy on my domains!
Re:Whois public database is in breach of GDPR, according to ... by always_good on Tuesday April 17, 2018 @01:46PM (#16860586)
If you don't want it, then you can use pretty much every other registrar that doesn't build it in.

But an issue with whois privacy is that if you ever don't have it for a period (like you forget to renew/autorenew), then it's now saved in a number of DNS/whois history services.

Re:Whois public database is in breach of GDPR, according to ... by hathawsh on Tuesday April 17, 2018 @04:08PM (#16861839)
Those services are probably also in breach of GDPR. :-)
Re:Whois public database is in breach of GDPR, according to ... by haldora on Tuesday April 17, 2018 @08:44AM (#16857735)
namesilo [1] provides free whois privacy on domain name purchases. Classic interface, but very cheap. :)

[1] https://www.namesilo.com

Re:Whois public database is in breach of GDPR, according to ... by virusduck on Tuesday April 17, 2018 @12:58PM (#16860111)
I love namesilo, and I find the interface refreshing/charming. The price is right, too!

As an aside, .us addresses cannot be registered anywhere with privacy controls enabled.

Re:Whois public database is in breach of GDPR, according to ... by jessaustin on Tuesday April 17, 2018 @09:04PM (#16863788)
It doesn't seem that .us addresses would be subject to GDPR? One could see .com as an edge case, even though really Europeans should just appreciate the fact we let them on our internet b^), but .us is not in doubt.
Re:Whois public database is in breach of GDPR, according to ... by fwn on Wednesday April 18, 2018 @09:43AM (#16867298)
True for .us. however: There is currently (as far as I understand) no way to hide whois data for .de (German) domains. So that might get interesting.
Re:Whois public database is in breach of GDPR, according to ... by panarky on Tuesday April 17, 2018 @10:13AM (#16858450)
Re:Whois public database is in breach of GDPR, according to ... by garaetjjte on Tuesday April 17, 2018 @09:18AM (#16857964)
I think it depends on TLD. My country TLD whois just lists registrant info as 'data restricted' unless it is explicitly requested to be public.
Re:Whois public database is in breach of GDPR, according to ... by astura on Tuesday April 17, 2018 @09:50AM (#16858250)
I registered my domain on Namecheap and I got WhoisGuard at no additional cost, maybe it's only for the first year though? I made sure it was actually no additional cost by removing it to see the total and it was still the same price, $11/year. I say "no additional cost" but it might actually be more like "bundled cost."
Re:Whois public database is in breach of GDPR, according to ... by freehunter on Tuesday April 17, 2018 @10:09AM (#16858422)
Namecheap is free for first year but you have to pay for any additional years.
Re:Whois public database is in breach of GDPR, according to ... by astura on Tuesday April 17, 2018 @10:19AM (#16858510)
Thanks for the info.

Ah, yes, its documented:

https://www.namecheap.com/security/whoisguard.aspx

>When you register an eligible new domain name or transfer an existing eligible domain into Namecheap, you'll receive the first year of WhoisGuard privacy protection absolutely FREE.

Re:Whois public database is in breach of GDPR, according to ... by jasonjayr on Tuesday April 17, 2018 @08:49AM (#16857761)
https://www.pairdomains.com/

Free protection, no upsells, $19/yr for 1 yr of .com $13/yr for 5 years. TOTP 2FA as well. Never had a problem for the 15 years I've been with them.

Re:Whois public database is in breach of GDPR, according to ... by tomcooks on Tuesday April 17, 2018 @09:10AM (#16857906)
Glorious porkbun.com
Re:Whois public database is in breach of GDPR, according to ... by isaack on Tuesday April 17, 2018 @11:32AM (#16859255)
Seconded.

They run their own TLD's .design, .ink and .wiki [1] so these guys really know their stuff. Support is not 24/7, but usual office hours, but those who pick up your phone/email REALLY know what they are talking. Plus really cheap domains, they mentioned somewhere that they are aiming for $1 mark-up for all TLD's.

[1]: http://toplevel.design/

Re:Whois public database is in breach of GDPR, according to ... by ateesdalejr on Tuesday April 17, 2018 @04:32PM (#16862054)
Me three. I own a few .ninja domains there. I didn't even notice they gave you free privacy until after having bought there. Every question I had was promptly answered in a few hours as well.
Re:Whois public database is in breach of GDPR, according to ... by lsh on Tuesday April 17, 2018 @08:56AM (#16857808)
gandi.net
Re:Whois public database is in breach of GDPR, according to ... by always_good on Tuesday April 17, 2018 @09:46AM (#16858213)
Re:Whois public database is in breach of GDPR, according to ... by lgunsch on Tuesday April 17, 2018 @12:37PM (#16859914)
.ca domains don't need to be protected - they get it for free. I only need to sign up for the extra protection when I register domains on other TLDs.
Re:Whois public database is in breach of GDPR, according to ... by yread on Tuesday April 17, 2018 @08:43AM (#16857732)
google domains
Re:Whois public database is in breach of GDPR, according to ... by cm2187 on Tuesday April 17, 2018 @09:55AM (#16858287)
OVH but they do not hide the name, just all other data
Re:Whois public database is in breach of GDPR, according to ... by facetube on Tuesday April 17, 2018 @10:00AM (#16858336)
Gandi
Re:Whois public database is in breach of GDPR, according to ... by bringtheaction on Tuesday April 17, 2018 @10:09AM (#16858416)
Gandi user here. After I read your comment I tried to enable this but it doesn't work.

When I change whois privacy to enabled and press save it just says "Unable to update the contact."

This happens both with my .com and my .net domain.

Re:Whois public database is in breach of GDPR, according to ... by facetube on Sunday April 22, 2018 @06:51AM (#16895601)
Weird; I have active domains where it's working. Given it requires a contact info update, could be an unrelated bug. I'd definitely file a ticket.
Re:Whois public database is in breach of GDPR, according to ... by distantsounds on Tuesday April 17, 2018 @09:08AM (#16857893)
njal.la (and they host DNS as well!) - operated by ex-piratebay dudes
Re:Whois public database is in breach of GDPR, according to ... by ryanlol on Tuesday April 17, 2018 @12:16PM (#16859693)
There’s an UDRP precedent saying that using njal.la as your registrar constitutes bad faith.

http://www.wipo.int/amc/en/domains/decisions/text/2017/d2017...

Given that precedent matters a lot in UDRP cases, I’m not sure that njal.la is a realistic option.

Re:Whois public database is in breach of GDPR, according to ... by wlll on Tuesday April 17, 2018 @11:21AM (#16859133)
Re:Whois public database is in breach of GDPR, according to ... by nabc45 on Tuesday April 17, 2018 @08:45AM (#16857739)
Namesilo?
Re:Whois public database is in breach of GDPR, according to ... by Kwpolska on Tuesday April 17, 2018 @09:32AM (#16858083)
Where are the free services? And are they really free, or are they silently included in the domain cost? I’ve yet to see anyone beat Namecheap’s $13.75 for .com (2nd year onwards, with protection).
Re:Whois public database is in breach of GDPR, according to ... by djsumdog on Tuesday April 17, 2018 @10:02AM (#16858358)
name.com charges extra for "whois protection." The e-mails I have registered for various contacts are pretty much spam buckets. You pretty much need a separate VoIP account to handle all the scam calls/voicemail too.

I get some calls/e-mails so quickly I wonder if they have some kind of live stream setup for registrations on some TLDs.

Re:Whois public database is in breach of GDPR, according to ... by nicky0 on Tuesday April 17, 2018 @07:50AM (#16857439)
Godaddy
Re:Whois public database is in breach of GDPR, according to ... by tazard on Tuesday April 17, 2018 @09:05AM (#16857865)
At least in Canada, this is absolutely not true. https://ca.godaddy.com/domainaddon/private-registration.aspx
Re:Whois public database is in breach of GDPR, according to ... by tazard on Tuesday April 17, 2018 @09:08AM (#16857888)
Sorry, I thought you were replying to the, where it's free parent, not the where it's not free parent. Please ignore what I wrote earlier.