News for hackers. Stuff that matters.
Re:Google .dev domain early access by whatshisface on Saturday February 16, 2019 @12:30PM (#19179700)
A while ago, some posts on HN went around saying that you shouldn't use third-world TLDs for your startup because some of them are unreliable stewards who would put your domain at risk. Does registering a .dev domain make you dependent on Google in the same way that registering a .ly makes you dependent on Libya?
Re:Google .dev domain early access by vtange on Saturday February 16, 2019 @01:00PM (#19179878)
There was this one guy who lost a valuable Twitter handle due to him using his custom domain email (via GoDaddy) as a login email.[0] I'd like to think imagine Google is better than GoDaddy when it comes to security and fighting social-engineering attacks but who knows. But if Google is a weak link wouldn't that also mean all our gmails are not as safe as we think?

[0] https://medium.com/@N/how-i-lost-my-50-000-twitter-username-...

Re:Google .dev domain early access by andrepew on Saturday February 16, 2019 @01:51PM (#19180233)
I'd say Google would be one of the most resistant organizations to social engineering by virtue of the fact that you can never really talk to an actual human even if you are a legit user and want help on an issue.
Re:Google .dev domain early access by bfdm on Saturday February 16, 2019 @03:03PM (#19180638)
The ultimate "it's a feature, not a bug!" case.
Re:Google .dev domain early access by shard972 on Saturday February 16, 2019 @09:32PM (#19182308)
Except we have the example of the daily stormer, a neo nazi website that had their domain ownership siezed by google.
Re:Google .dev domain early access by cheeze on Saturday February 16, 2019 @02:15PM (#19180389)
I don't really understand the worry here though. Aren't you always trusting your registrar when you buy a domain name? Google at least has a pretty solid track recordin wrt security.
Re:Google .dev domain early access by 18pfsmt on Saturday February 16, 2019 @05:23PM (#19181320)
I hate to be that guy, but I honestly hope you don't make decisions based on anecdotes, and instead rely on data.

You are dependent on your vendors, period. Choose them wisely. This is not a mystery.

Re:Google .dev domain early access by whatshisface on Saturday February 16, 2019 @07:06PM (#19181768)
>You are dependent on your vendors, period.

You aren't dependent on your vendors if you can switch them out without destroying your company. The real mystery is why people turn their own businesses in to little barnacles on the skin of behemoths and expect to not get brushed off.

Re:Google .dev domain early access by dweekly on Saturday February 16, 2019 @12:57PM (#19179864)
The short answer is that yes, this domain is administered by Google through a holding entity. See https://www.iana.org/domains/root/db/dev.html
Re:Google .dev domain early access by TaylorAlexander on Saturday February 16, 2019 @12:43PM (#19179775)
It’s a good question. Does anyone know who legally owns the domain and what responsibility google has to ensure you can use the TLD in perpetuity?
Re:Google .dev domain early access by tialaramex on Saturday February 16, 2019 @03:09PM (#19180668)
Names in the DNS aren't personal property (and they certainly aren't real property). So "owns" is probably the wrong word.

But ICANN, which is responsible for the entire hierarchy, expected that eventually at least some of the new gTLD registry operators would fail, and so there is an escrow agreement for each one. If the gTLD is popular enough that somebody else will operate it, the last daily backup from escrow is given to the new operator and things continue from there. I guess your new registry operator may set fees or other conditions your current registrar doesn't like, but if you like the new you can move to a registrar that's OK with them. The list of names in the registry doesn't vanish unless both your registry AND the third party escrow company screw up.

If the gTLD is grossly unpopular, it may not be possible to find a new operator for that gTLD registry. I don't know what happens in that case, although whatever it is by definition won't happen to many names.

I also don't know what happens for the very stupid gTLDs that are essentially for private use by a single organisation, like .kerrylogistics. And I don't really care, so long as the fees roll in to pay for everything. Actually I'd have billed them for their original request, .kerrylogisitics [sic] as well, but I guess someone felt that was too mean.

Re:Google .dev domain early access by wmf on Saturday February 16, 2019 @02:35PM (#19180496)
"ICANN requires all registrars and gTLD registries to contract with a data escrow provider in order to safeguard registrants ... in case of registry or registrar failure, accreditation termination, or accreditation relapse without renewal." Basically if Google screws up then ICANN will give the data to someone competent who will take over the domain. https://icannwiki.org/Data_Escrow
Re:Google .dev domain early access by dcplogic on Saturday February 16, 2019 @01:04PM (#19179907)
I trust Google a heck more (to stay around and honor contracts) than I trust Libya.