News for hackers. Stuff that matters.
Re:The Attempted Corporate Takeover of .Org by iameli on Wednesday January 22, 2020 @05:38PM (#22122830)
> Verisign controls the registries for .com and .net, two of the internet’s most popular. All it does is administer a database and collect small sums from website owners, but with computing power rising and practically no marginal cost to adding another website to the database, the entire enterprise is a license to print money. In the third quarter of 2019, Verisign showed operating income of $205.6 million on $308.4 million in revenues, a profitability margin of 66.67 percent. This makes Verisign one of the most profitable companies in the world.

I wish we lived in a world where a company being kinda monopolistic to make a 67% profit margin was enough to get me angry. If I hadn't read this, I'd have assumed they were making a lot more than $100 million a year profit.

I see the real answer to this as the gTLD program: radically expand the number of domain-issuing entities and normalize companies operating on something other than .com.

Re:The Attempted Corporate Takeover of .Org by byuu on Wednesday January 22, 2020 @06:01PM (#22123010)
The problem is you can't move a domain once you've established it. I'm stuck on byuu.org for life. There's 15 years worth of links to it scattered across the web that would all go dark. Or more precisely, that would all suddenly point at spam. I could never get most of them updated.

Even my subdomain from my previous host from 15 years ago is squatted to this day to serve up advertising. It's even aware of the software that I used to host there.

One answer in my view is to remove the maximum length of prepayment for domains. Let us buy a domain for 100 years. Sure, that's $1,000. Maybe throw in a discount. But now we never have to worry about it again, as long as we live. Or at least, as long as the registry lives. It would never be squattable.

Re:The Attempted Corporate Takeover of .Org by pdimitar on Wednesday January 22, 2020 @07:46PM (#22123716)
There are many examples that I am currently too lazy to point at that clearly prove that "lifetime license" or "lifetime guarantee" are promises that are basically never kept.

Your idea would turn into yet another way to extract even more money from customers without actually bringing additional value (or guarantees) to the table. :(

Re:The Attempted Corporate Takeover of .Org by Andrew_nenakhov on Thursday January 23, 2020 @01:25AM (#22125319)
> "lifetime license" or "lifetime guarantee" are promises that are basically never kept.

Not in the parachute selling business...

Re:The Attempted Corporate Takeover of .Org by ehmish on Wednesday January 22, 2020 @06:58PM (#22123402)
I'd be worried that whatever new tld I switched to would just as easily do the same thing (start charging stupid money for it), with a big enough tld at least then you'd have enough critical mass to stage a protest (e.g the .org thing here)
Re:The Attempted Corporate Takeover of .Org by dangerface on Thursday January 23, 2020 @09:48AM (#22127919)
If you want a new domain and to keep your backlinks you can 302 the old domain to the new.

> One answer in my view is to remove the maximum length of prepayment for domains. Let us buy a domain for 100 years.

Makes sense to me but I don't think I have seen anything more than 10 years.

Re:The Attempted Corporate Takeover of .Org by account42 on Thursday January 23, 2020 @11:15AM (#22128696)
> If you want a new domain and to keep your backlinks you can 302 the old domain to the new.

Which will only work as long as you keep paying for the old domain.

Re:The Attempted Corporate Takeover of .Org by munk-a on Thursday January 23, 2020 @12:42PM (#22129729)
This would actually be a legitimate use of 301 - except 301 is a flawed concept because if it actually worked as designed it'd allow creeping devastation of the URL space. Woops can't use `example.org/index.html` ever again - someone 301'd that to `example.org/index.php`
Re:The Attempted Corporate Takeover of .Org by kerkeslager on Thursday January 23, 2020 @10:21AM (#22128199)
This is a case where incentives, in the way that HNers use the term "incentives", don't work.

The cost of a domain name is supposed to dis-incentivize buying up domain names simply to squat and/or serve ads, but clearly the price isn't high enough to dis-incentivize that. And we can't raise prices, because then it dis-incentivizes legitimate users. The problem is that the cost of domain names is a larger dis-incentive to legitimate users than it is to domain squatters.

If a domain is $10 and a squatter sells domains for $100, then they only have to sell 1 in 10 domains to break even, so risk is very low: they don't have to really be overly concerned with only buying domains that will sell. And that's a simplistic model: the reality is that squatters have much more sophisticated valuation models, and have therefore have much higher profit margins, keeping their risk even lower. Sometimes domains sell for tens of thousands of dollars.

Meanwhile, the risk is very high for a legitimate user. If you have a company or a nonprofit, you basically have to choose a name that's marketable, memorable, relevant to your business/nonprofit, and unique, on the first try. This can literally make or break a business. And once you have that name, there's basically only one ideal URL for that name: yourbusiness.com or yournonprofit.org. So you have a supply of one and a demand of this might make or break my organization so cost can be pretty much "what is the maximum you can pay?". As such, if the max you can pay isn't enough for the domain squatter to want to sell, you just don't get the domain, and your organization gets a sub-standard web presence.

I don't think we can overestimate the impact of this problem. I've worked for a company which owns your-business.com rather than yourbusiness.com (these are examples obviously--it would be unprofessional to give out actual names). Their marketing is very explicit about the dash, and potential customers still end up at the squatted non-dashed domain, which is only getting more expensive as the company becomes more successful. Luckily their value proposition is large enough, and clients sophisticated enough, that the friction of actually getting to the site isn't as large enough barrier to prevent growth. But if your business is a lower-margin business with less sophisticated clients, that would be a big enough barrier to prevent success entirely.

Re:The Attempted Corporate Takeover of .Org by Psyladine on Thursday January 23, 2020 @08:45AM (#22127450)
Or separate the entity from the address. If you move, the post office forwards correspondence for 6 months and you are free to communicate an updated address to people who send you things and visit you.

Whether this should be done and on what level will definitely be interesting. How sure am I that I want my old email address to be telling spammers where I 'live' now?

Re:The Attempted Corporate Takeover of .Org by toomuchtodo on Wednesday January 22, 2020 @06:51PM (#22123340)
What if a signed version of the content was always accessible, content addressable, in the Internet Archive? Does it matter than what the current namespace is?
Re:The Attempted Corporate Takeover of .Org by toyg on Wednesday January 22, 2020 @07:06PM (#22123454)
> in the Internet Archive

I would wager that 95% of web users do not even know that IA exists, let alone that they can use it.

> Does it matter than what the current namespace is?

As long as it's the only thing a browser will consider to retrieve information, yes. Which is why cool URIs don't change.

Re:The Attempted Corporate Takeover of .Org by markdown on Wednesday January 22, 2020 @07:27PM (#22123599)
> I would wager that 95% of web users do not even know that IA exist

You are far too optimistic. It's probably more like 99.999999%

Re:The Attempted Corporate Takeover of .Org by CrazyStat on Wednesday January 22, 2020 @11:04PM (#22124755)
> 99.999999%

That would mean only 80-odd people know about IA, which seems a tad low :P

Re:The Attempted Corporate Takeover of .Org by m_eiman on Thursday January 23, 2020 @03:31AM (#22125865)
> 99.999999%

That would mean only 80-odd people know about IA, which seems a tad low :P

I suppose that means that for most people, 99.9999% of the world's population don't know they exist. Interesting thought. I wonder which living person is known of by the largest percentage, and what that percentage is?

Re:The Attempted Corporate Takeover of .Org by markdown on Thursday January 23, 2020 @01:11AM (#22125257)
LOL you're right. 99.9%
Re:The Attempted Corporate Takeover of .Org by dehrmann on Thursday January 23, 2020 @01:20AM (#22125297)
Hipsters are going to start measuring themselves in nines of obscurity.
Re:The Attempted Corporate Takeover of .Org by dredmorbius on Thursday January 23, 2020 @12:11AM (#22125023)
That's helpful.

But branding, let alone domain names, is proof that namespaces matter. And have immense market value.

Re:The Attempted Corporate Takeover of .Org by arkitaip on Wednesday January 22, 2020 @06:09PM (#22123069)
I suspect what the new gTLD program has really done is to make com/org/net seem even more trustworthy and premium because people can no longer keep up with the influx of new gTLDs ( all 1200 of them!).
Re:The Attempted Corporate Takeover of .Org by jtl999 on Wednesday January 22, 2020 @09:08PM (#22124173)
I'm not generally sympathetic to the "domain investor" types, but this quote from domain investor Rick Schwartz I feel is spot on and has been my thought since "day one" of the new TLDs

> "As we go into the seventh year of the new gTLD experiment, they are meaningless. They haven’t been adopted by almost anybody. Circulation is poor. So many registrations are questionable or penny-promotional. The majority are parked and not in use nor will they ever be. And 99.9% of the people on this planet could not name a single one of them! Not a one!"

Full article: http://domainincite.com/25103-di-leaders-roundtable-4-big-pr...

Re:The Attempted Corporate Takeover of .Org by coldpie on Thursday January 23, 2020 @09:11AM (#22127624)
Mostly the new gTLDs (actually I think the ccTLDs are at fault, but I'm going to whine anyway) mean I no longer know where to put the dots in a domain name. Is it CoolBanan.as? CoolBana.nas? Cool.Ban.an.as? Fuck it, I'm going to the grocery store instead.
Re:The Attempted Corporate Takeover of .Org by jrochkind1 on Thursday January 23, 2020 @04:54PM (#22132625)
Hey, can you pick up some cool bananas for me while you're there?
Re:The Attempted Corporate Takeover of .Org by jtl999 on Thursday January 23, 2020 @05:27PM (#22132973)
Yum
Re:The Attempted Corporate Takeover of .Org by iameli on Wednesday January 22, 2020 @07:39PM (#22123674)
That's fair. I'm hoping this'll become less true over time as folks get used to there being lots of TLDs.
Re:The Attempted Corporate Takeover of .Org by stubish on Wednesday January 22, 2020 @08:35PM (#22124004)
Is this happening? Actual question if there is someone here who measures this sort of thing.

.io seems to have been accepted by the tech community, as the place to go when you can't get your .com or .net. Maybe .ai too. Are there any new gTLDs gaining acceptance in the wider community?

Re:The Attempted Corporate Takeover of .Org by jlokier on Wednesday January 22, 2020 @09:33PM (#22124307)
.io is an interesting example - because it is quite expensive yearly, poorer techies avoid it.

So anyone who thinks .io is as good as .org is probably not price sensitive, and might be contributing to the worry that .org will go the same way eventually.

.ai is even more expensive, but I haven't noticed .ai domains being used for things I visited, only heard that they are used.

Re:The Attempted Corporate Takeover of .Org by kevin_thibedeau on Wednesday January 22, 2020 @11:53PM (#22124969)
ccTLDs are vulnerable to censorship by the country owning them.
Re:The Attempted Corporate Takeover of .Org by flxy on Wednesday January 22, 2020 @08:41PM (#22124043)
.gg has seen decent adoption in newer gaming related sites. But that's the only one I can think of right now.
Re:The Attempted Corporate Takeover of .Org by dingaling on Thursday January 23, 2020 @03:40AM (#22125903)
Not only is .gg expensive but phonetically awkward on the telephone, something I didn't consider when registering my main domain years ago.
Re:The Attempted Corporate Takeover of .Org by philpem on Thursday January 23, 2020 @04:19AM (#22126077)
Every time I see a ".gg" domain, I read it out as "gee-gee" -- a colloquial term for a horse...
Re:The Attempted Corporate Takeover of .Org by JohnFen on Thursday January 23, 2020 @01:26PM (#22130185)
I don't know about the general attitude, but I tend to view the nonstandard gTLDs as suspect, and tend to be hesitant to go to such sites.
Re:The Attempted Corporate Takeover of .Org by ardy42 on Thursday January 23, 2020 @12:26AM (#22125085)
> I see the real answer to this as the gTLD program: radically expand the number of domain-issuing entities and normalize companies operating on something other than .com.

However, that has another problem in that it increases the opportunity for fraud via. The benefit of a small number of tlds is that the most memorable part is typically the most unique and provides human-distinguishable identity, but that's out the window if you've normalized mybusiness.com, mybusiness.biz, mybusiness.business, mybustiness.bz, mybusiness.bus, etc. Typosquatting still exists with .com, but it's far more manageable that the above.

Re:The Attempted Corporate Takeover of .Org by baligad on Thursday January 23, 2020 @03:59PM (#22131958)
> the real answer to this

Alternatively, I like the concept of Tor onion services, where the "domains" are acquired in a permissionless fashion. Names are just randomly generated ed25519 strings so there's no squatting and your address never expires. If you want a vanity domain, you just commit compute time to brute force something human-readable. [1] The obvious drawback is that you have to be a Tor client, but if you manage your own DNS, you could use Tor's DNSPort mode as a kind of forwarding target for non-Tor clients on your lan. [2]

1: https://www.jamieweb.net/blog/onionv3-vanity-address/

2: https://www.grepular.com/Transparent_Access_to_Tor_Hidden_Se...

Re:The Attempted Corporate Takeover of .Org by swiley on Wednesday January 22, 2020 @06:33PM (#22123231)
I have some familiarity with the .com/.net stuff

Yes the registry is incredibly cheap to run, it’s the name servers themselves that are so expensive (from what I understand this is partially due to uptime requirements.)

Re:The Attempted Corporate Takeover of .Org by munk-a on Wednesday January 22, 2020 @07:41PM (#22123681)
Can you clarify a bit here?

I believe most people, when executing a name look up, will usually just end up talking to one of a battery of ISP provided DNS servers. So while the registry's name servers need to feed those servers (and probably be heavily redundant and reliable) they wouldn't actually end up handling an insane amount of traffic. I'm actually a bit curious now if there are any sorts of requirements on how much traffic registrars need to be able to support or if everyone just over-resources and still makes enough money that the question has never been deeply investigated.

Re:The Attempted Corporate Takeover of .Org by C1sc0cat on Thursday January 23, 2020 @05:20AM (#22126324)
I worked for a Registry (.coop) and sat next to the lead, interestingly we (poptel) also bid for .org back in the day and lost to the shysters that are selling out

Your right you have to have multiply redundant systems in four continents with everything running on HA kit with auto switch over diverse routing for power and data and I think hot standbys as well.

Re:The Attempted Corporate Takeover of .Org by toast0 on Thursday January 23, 2020 @02:28AM (#22125598)
I don't know if there are stats available, but the requests per second has got to be huge.

There are a ton of ISPs, and many of them run regional recursive servers. Each of those servers is going to see a ton of different domains that they need to query at the registry servers. Most registries are serving glue records with a 1-3 day TTL, but ISP caches may not have enough memory to keep the long tail names in cache for that long, and the long tail is long. There's millions of domain names to query the registry servers for.

Re:The Attempted Corporate Takeover of .Org by amaranth on Thursday January 23, 2020 @02:03AM (#22125477)
With a short TTL being standard to allow quick changes and such a wide range of domains you're going to get a lot of cache misses and have to go to the TLD to get the answer.
Re:The Attempted Corporate Takeover of .Org by dorfsmay on Wednesday January 22, 2020 @06:01PM (#22123012)
And registrars not charging 20+ USD per year for non-dot:com gTLD domains!
Re:The Attempted Corporate Takeover of .Org by captncraig on Thursday January 23, 2020 @12:14AM (#22125033)
This is a big problem for me. I will buy novelty domains on sale, then abandon them after a year because the renewal price is so much higher than the 1st year promotion. At least com and net are fairly consistent year to year.
Re:The Attempted Corporate Takeover of .Org by m463 on Wednesday January 22, 2020 @06:07PM (#22123056)
comcast, at&t and verizon have ~60% gross profit
Re:The Attempted Corporate Takeover of .Org by tryptophan on Wednesday January 22, 2020 @11:39PM (#22124923)
'gross profit' has a very specific meaning that is unintuitive. It doesn't include fixed costs or taxes. It's much better to look at profit margin, which is what they actually make. For Comcast's case, it's like 11.5%.
Re:The Attempted Corporate Takeover of .Org by iameli on Wednesday January 22, 2020 @07:38PM (#22123665)
right, exactly - I'm ~200 times angrier at Comcast for their $22.7 billion in profits than I am at Verisign for their $100 million.
Re:The Attempted Corporate Takeover of .Org by goodmachine on Thursday January 23, 2020 @07:45AM (#22127040)
> the entire enterprise is a license to print money

Correct

https://www.google.com/search?tbm=fin&q=NASDAQ:+QQQ&stick=H4...