Top-level domain name registry service on Google App Engine (registry.Google)

Re:Top-level domain name registry service on Google App Engi... by chatmasta on Wednesday May 16, 2018 @10:43AM (#17082772)

Pretty cool they’re open sourcing this, but now it will be much easier for malicious actors to find bugs in the service. A security compromise of such a system would be catastrophic. Is it worth the risk of open sourcing in this case?

[ Parent | on HN ]

Re:Top-level domain name registry service on Google App Engi... by zitterbewegung on Wednesday May 16, 2018 @10:58AM (#17082910)

Well if you have a million eyes looking at the source code maybe you would find more bugs. On the other hand before you release something that you want to open source it might be a good idea to do a security analysis of the code.

[ Parent | on HN ]

Re:Top-level domain name registry service on Google App Engi... by CydeWeys on Wednesday May 16, 2018 @03:52PM (#17085863)

https://en.wikipedia.org/wiki/Security_through_obscurity

[ Parent | on HN ]

Re:Top-level domain name registry service on Google App Engi... by JoeAnzalone on Wednesday May 16, 2018 @10:50AM (#17082834)

Won't it also be easier for non-malicious actors to find bugs and report them responsibly?

[ Parent | on HN ]