News for hackers. Stuff that matters.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by crazygringo on Wednesday July 08, 2020 @10:14AM (#23770050)
Honestly the whole notion of losing your domain if you accidentally don't pay is pretty silly. A domain in usage is obviously meant to continue, even if an organization misses a process to renew.

Far better would be that a domain is yours in perpetuity until you explicitly cancel it. If you don't pay, you get bills, or it goes to collections, or the domain temporarily stops resolving or something... but you shouldn't lose it. (If a person passes away, their estate figures out what to do with it.)

The notion that if you forget to pay, 60 days later it's gone (poof), just seems like a dumb policy in the first place.

And for those wondering how a business forgets to renew, it's pretty easy: the employee (A) in charge of managing renewals is let go, and so is their manager (B) at around the same time, so the manager (B) doesn't transfer responsibility from (A) to a new person, and their manager (C) doesn't realize the original employee two levels down (A) never had their responsibility transferred, because that was B's job.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by thrownaway954 on Wednesday July 08, 2020 @11:00AM (#23770523)
There is already something in place where if you forget to renew, the domain is place in holding for a specified amount of time before it is released.

domains are an asset just like anything else. personally i don't see why if you are a business, you don't register you domain for 10 years or more. just as a test i went to godaddy and looked at how much it costs to register a .com domain for 10 years... it was less than $100. honestly... if you are a business and it costs you $1000 to register you domain for 100 years, why wouldn't you do it.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by crazygringo on Wednesday July 08, 2020 @11:36AM (#23770932)
First, you can't renew for more than 10 years.

Second, long-term renewals are precisely the scariest ones. It's actually tremendously difficult for a business to keep a process in place that happens once every 10 years. The employee who registered the domain (and their e-mail address) are probably long gone. The responsibility has been passed along 5 different employees during that time, and the last one got fired and nobody knew they were the one in charge of renewals. And then you find out, suddenly you don't own the domain anymore!

This is the whole problem in a nutshell. Counter-intuitively, if it were a bill sent monthly, it would be much harder for people to forget about (and you could rely on USPS forwarding for changes of address).

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by tzs on Wednesday July 08, 2020 @12:51PM (#23771689)
If you believe that Network Solutions will be around and in the domain business long term, you can have them handle it for you.

They offer 20 and 100 year "registration". I put registration in quotes because the max underlying registration is still only 10 years. They implement 20 and 100 year registration by registering for 10 years and then extending that one year per year.

The 100 year "registration" used to even be a good deal. It was $999, which for .com and .net and .org brought the effective per year price down to around what the cheaper registrars charged and locked it in.

I actually thought of using it for my domain, until I remembered that I'll be long dead before getting anywhere near even half of that time out of it. Even taking into account likely price increases in year by year registration at the cheap places, which make the break even point for $999/100 years much earlier than 100 years, I was unlikely to be around that long.

100 years is now $2000, making it a much less interesting deal. Still, assuming a modest annual increase at the cheap registrars it still does eventually win so if you are going to need the domain a long time it might actually be worth it (if you are confident NS will last that long), and does make it so you don't have to think about the problem for another 100 years.

The 20 year option, also for $20/year, is almost certainly not worth it unless not having to worry about renewal for 20 years is an overwhelming concern for you. The prices at the cheaper registrars are probably unlikely to rise fast enough to make the break even for $20/year less that 20 years out, assuming you start with a 10 year registration now so that the current ~$10/year is locked in for 10 years.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by smeyer on Wednesday July 08, 2020 @01:33PM (#23772121)
>Still, assuming a modest annual increase at the cheap registrars it still does eventually win

I know it's not the main point of your comment, but if you're going to consider future annual increases you should also consider the net present value. If you have to pay $2000 up front and the cost of a domain stays at about ~$10/year but goes up with inflation, you'll never win. Financially, you're better off investing your $2,000 (even very conservatively) and then paying the $10/year registration fee out of your earnings while pocketing the rest (and still having your $2,000 in principal at the end).

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by toast0 on Wednesday July 08, 2020 @07:39PM (#23775472)
> The 100 year "registration" used to even be a good deal.

Yeah, but then you're dealing with Network Solutions for 100 years. That's not a good deal at any price. :P

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by curiouscats on Wednesday July 08, 2020 @11:42AM (#23770991)
You can set it up so you renew up to 10 full years (from the remaining 9) every year. That way you have 9 chances to fail before it becomes an issue.

Also for a fairly small organization you can have all the domains listed in one place with the renewal dates and review that every 6 months or year (to make sure all the new ones were added, the contacts are still all valid [hopefully you setup things like [domains]@[companyname].com or something but..., you have noted any that you no longer want or were transferred away...

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by tzs on Wednesday July 08, 2020 @12:59PM (#23771783)
> You can set it up so you renew up to 10 full years (from the remaining 9) every year. That way you have 9 chances to fail before it becomes an issue.

That's also a good idea because it gives you plenty of time to switch domains if you have to.

Consider the recent almost-sale of .org which had a lot of people worried about large price increases. If you want to move to a cheaper TLD after such a thing it could take a lot longer than a year. Remember, it's not just web stuff you need to address. There's also email. My primary email has been at my personal domain for over 20 years--getting everyone who has it updated with a new address at a different TLD would not be quick.

By keeping it 10 years out, I've got at least 9 years to deal with moving everything if I have to switch.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by hanniabu on Wednesday July 08, 2020 @11:58AM (#23771145)
I use namecheap and just use their auto renew feature. Do other registrars not have that option?
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by crazygringo on Wednesday July 08, 2020 @12:03PM (#23771199)
Auto renewal doesn't help here.

Credit cards expire, e-mails get deactivated, addresses change.

If you're not getting notices about your domain expiring in the first place, auto-renew isn't going to stay working after your credit card expires, which is only a couple years.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by rectang on Wednesday July 08, 2020 @12:15PM (#23771311)
I use Namecheap, and I have deliberately avoided their auto-renewal service because it doesn't offer me anything.

The key point is that a human needs to be involved in an audit process which occurs regularly. And so I renew all my domains once per year in December, a year in advance.

Now that I think about it, I suppose I could extend one year at a time, but keep a 1-2 year buffer (or larger) in case of dire emergency instead of a 0-1 year buffer.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by ardy42 on Wednesday July 08, 2020 @12:20PM (#23771371)
> I use namecheap and just use their auto renew feature. Do other registrars not have that option?

That still runs into the 10 year problem. Whatever payment information an organization sets up will probably be invalid in 10 years.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by fomine3 on Thursday July 09, 2020 @12:46AM (#23777027)
This is good solution.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by heavenlyblue on Wednesday July 08, 2020 @01:40PM (#23772215)
There’s really absolutely no problem with that.

The expiration date is public information, so even if the person left and you have no idea which email is registered on it - you still own the business (and thus can reclaim the account) and can check publically whether the renewal is due.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by ahmedfromtunis on Wednesday July 08, 2020 @12:02PM (#23771193)
That's exactly why I renew all my domains on a yearly bases, even for personal ones. It forces me to remember to do it in a way that I never risk forgetting about it.

Just try to remember what you bought 10 years ago, and you'll understand why I'm scared of long-term renewals.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by bestnameever on Wednesday July 08, 2020 @01:08PM (#23771855)
> Second, long-term renewals are precisely the scariest ones. It's actually tremendously difficult for a business to keep a process in place that happens once every 10 years.

Renew for 10 years and then have a process to extend the renewal every year.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by jessriedel on Wednesday July 08, 2020 @12:49PM (#23771655)
If you want a monthly reminder that something exists, you can set that up. Why use the billing service of another company for that reminder function?
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by robertpateii on Wednesday July 08, 2020 @01:00PM (#23771789)
A monthly reminder for a person is great. A monthly reminder within a business organization is what? A calendar event for everyone in IT? For the whole company? The nice thing about monthly billing is it comes from the outside and would get bounced around until it found the right desk.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by jessriedel on Thursday July 09, 2020 @11:10AM (#23781106)
There are plenty of outside reminder services that send reminder emails. Are you saying that the company has a physical address it will always answer but not an email address? Or that it will ignore regular emails to this address unless they contain a bill? (If bills do get reliably paid, why not just make them every 10 years?)
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by artursapek on Wednesday July 08, 2020 @12:57PM (#23771768)
Honestly, what is with that? Why is there a limit on how long I can renew for? Some TLDs I've seen 1 or 2 year limits. What the fuck.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by thrownaway954 on Wednesday July 08, 2020 @04:28PM (#23773893)
"It's actually tremendously difficult for a business to keep a process in place that happens once every 10 years" "if it were a bill sent monthly"

there are so many calendar and reminder apps out there. just setup two of them to go off to remind you. respectfully, your forgetfulness is not an excuse.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by SirYandi on Wednesday July 08, 2020 @04:47PM (#23774062)
If it was as simple as that companies such as Mark Monitor surely wouldn't exist
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by thrownaway954 on Wednesday July 08, 2020 @05:32PM (#23774473)
it is that simple, however people don't want the responsibility.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by anigbrowl on Wednesday July 08, 2020 @12:40PM (#23771574)
I'm an individual, and I really don't like administration. Why can't I just register and own a domain rather than effectively paying rent to exist?

Your point about business operations is totally valid, but business is just one sort of human activity and shouldn't be the yardstick for everything else. Most of these blogs on blogspot.in were likely just personal journals. Domain registration seems like the sort of thing a public blockchain would be ideal for in comparison to a centralized registrar.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by smabie on Wednesday July 08, 2020 @12:50PM (#23771673)
Then name coin seems right up your alley!
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by anigbrowl on Wednesday July 08, 2020 @01:39PM (#23772203)
Why yes, yes it does. Thanks for the suggestion!
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by codezero on Wednesday July 08, 2020 @02:23PM (#23772743)
This isn't true for all registrars. My domain expired and it was re-sold via auction within seconds of its expiration. Network Solutions used to have a retention policy, they don't follow it if your domain has been bid on. I lost a domain I had owned since about 1997 this way :/
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by mratmeyer on Wednesday July 08, 2020 @11:08AM (#23770616)
ICANN does limit you to only being able to register for up to 10 years in advance.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by hartator on Wednesday July 08, 2020 @01:10PM (#23771874)
You can’t register a .com for more than 10 years.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by cj on Wednesday July 08, 2020 @10:30AM (#23770213)
This would be too easily abused by domain squatters, I think. Maybe instead increase the 60 days to 90 or 120? But increasing to "forever" is unrealistic.

I'm in the minority of people when I say this, but I'm in favor of making domain ownership enough of a burden to reduce the number of domains registered and never used vs. making them extremely cheap and easy to own.

There are so many great domains that are registered and not in use. When starting a company these days, it's difficult to find a decent .com without paying thousands of dollars to a squatter or compromising with a TLD like .io

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by crazygringo on Wednesday July 08, 2020 @11:33AM (#23770895)
> This would be too easily abused by domain squatters, I think.

Why? Professional domain squatters are the ones that never forget to renew, because it's their main business. And if they stop paying on 1,000's or 100,000's of domains, the registrar will take them to court pretty quick to resolve the contractual debt. And either the company goes bankrupt or pays the bill, same as literally any other professional service. A contract's still a contract.

And if you're squatting on just a few domains personally and stop paying, it goes to collections, shows up on your credit report, and lowers your credit score like any other consumer debt not meeting payments. Which, if you want to open new credit cards or buy a house, is gonna be a big problem.

There are already avenues to address this, the same as any other debt you incur. "Forever" just means until it sends you to bankruptcy and you lose it formally, worst-case scenario. It's not some kind of blank check to register a billion domain names, not pay for them, and face zero consequences...

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by djrogers on Wednesday July 08, 2020 @01:14PM (#23771898)
Your view here is entirely US / western centric. Billions of people have access to the Internet along with the right to buy domain names that don’t live in countries with collections agencies or credit reports.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by walshemj on Wednesday July 08, 2020 @02:09PM (#23772593)
You don't "buy" a domain any more that you "buy" your phone number -you rent it.

I assure you all countries have collection agencies even if its 3 guys with ak's in a technical with a DhskA

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by anticensor on Thursday July 09, 2020 @02:04AM (#23777378)
Most countries have state-enforced debt collection instead of private enforcement like in USA.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by walshemj on Thursday July 09, 2020 @03:56PM (#23784382)
I was joking about failed states
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by veridies on Wednesday July 08, 2020 @11:24AM (#23770802)
It would take a ton of bureaucratic overhead, but you could have a system where you could apply for permanent ownership of a domain only after establishing that you're actively using that domain for the purpose of a business or project. Basically a trademark system for domain names. Perhaps with the caveat that a limited number of domains could be reserved for any one project, so that Google couldn't tie a thousand different URLs to Blogspot.

I'm very unhappy with the impermanence of online resources; some great websites that I used to rely on for information or conversation have just disappeared with time. Some have been archived by the Wayback Machine, some haven't. Obviously, a permanent server is a bigger concern (and a bigger problem) than a permanent domain, but I still think something like this could be a step in the right direction.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by OldHand2018 on Wednesday July 08, 2020 @12:29PM (#23771457)
> Basically a trademark system for domain names.

Maintaining ownership of a trademark is not trivial. People pay lawyers to do it. Perhaps they should do the same for important domain names?

https://www.uspto.gov/trademarks-maintaining-trademark-regis...

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by walshemj on Wednesday July 08, 2020 @02:10PM (#23772610)
They do RELEX (Reed Elsevier) paid a third party to mange their domain portfolio.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by acdha on Wednesday July 08, 2020 @11:20AM (#23770758)
I’d like some combination of both: increase the base price (or scale it with the number of domains owned by a single entity?) but have some kind of grace period based on the time you’ve held it where you accrue a charge with interest (to prevent squatters abusing it) but can get it back quickly if you pay in full.

If a business screws up, paying a few grand in late fees is much better than losing it to a squatter and that can protect users from someone malicious buying a domain used by an app or something.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by greyhair on Wednesday July 08, 2020 @11:27AM (#23770834)
I like your idea of having a time period based on how long you've continually held it, in a paid up fashion.

But even that should be capped to some reasonable time scale, like 90 to 120 days.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by acdha on Wednesday July 08, 2020 @03:21PM (#23773314)
Definitely — the main thing I was thinking is that this could be a great value add for a particular registrar focused on businesses. Bake in time and money so they could do something like send registered mail or something to an address on contact in addition to emails.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by zomglings on Wednesday July 08, 2020 @10:49AM (#23770394)
Oh man, I used to work at a startup where we forgot to renew our domain subscription because the domain was registered by our CEO and the renewal notice went to their personal email address and it got swallowed up in a tide of unread emails.

That was a fun day. Lots of freaking out, lots of looking balefully at all of our branded swag (domain printed as part of logo).

It turned out alright in the end - we got the domain back by placing a call to the TLD organization.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by roryokane on Wednesday July 08, 2020 @05:27PM (#23774425)
Side note: “balefully” means “menacingly”, not “wistfully”.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by mangamadaiyan on Wednesday July 08, 2020 @07:06PM (#23775227)
According to Chambers, it can mean both "menacingly" and "gloomily":

https://chambers.co.uk/search/?query=baleful&title=21st

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by zomglings on Wednesday July 08, 2020 @07:31PM (#23775419)
I actually meant "dolefully", but it came out "balefully". :)
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by tzs on Wednesday July 08, 2020 @01:22PM (#23771985)
> And for those wondering how a business forgets to renew, it's pretty easy: the employee (A) in charge of managing renewals is let go, and so is their manager (B) at around the same time, so the manager (B) doesn't transfer responsibility from (A) to a new person, and their manager (C) doesn't realize the original employee two levels down (A) never had their responsibility transferred, because that was B's job.

It's still pretty ridiculous, because businesses have plenty of other periodic filings and fees and renewals to deal with that have nothing to do with computers. There are permits that need renewal. Old fire extinguishers need to be replaced or recharged to avoid fines when the fire inspectors come around. There are all kinds of tax filings due monthly, quarterly, and yearly. There are various trademark and patent maintenance fees they need to pay during the life of a trademark or patent to keep it alive. They might also have long term contracts with janitorial services, landscaping services, copier/fax maintenance services, utilities, payment processors, and many others that they might want to review a couple weeks or months before they expire to research if they want to change providers.

Somewhere they should have a shared unified calendar of all these things, listing when they are due and what manager in in charge of getting them done. The computer stuff, like domain renewals and certificate renewals, should be on there.

This calendar should be regularly checked by someone high up, like the COO. That person just has to check it enough to be aware of any deadlines approaching, and if they do not get marked as "in progress" as they get close this person can poke the head of the appropriate department to get it taken care of.

Sure, a department could still have forgotten in the way you describe, but it gets noticed before the deadline giving them time to figure out how to fix it. But unless you get a chaotic shake up at the top, it should be nearly impossible for a company to actually forget about any of the aforementioned deadlines.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by techsupporter on Wednesday July 08, 2020 @02:40PM (#23772926)
You're quite right, but domains are fairly unique in that not renewing one lets someone else come along and pick up in the exact same place and "appear" to be the same entity that had the domain before. Phone numbers are another, but they're somewhat difficult to monitor for cancellations and then try to grab (it can be done as I've done it for a past employer, but it's not the same level of ease as a domain).

Even failing to renew a corporate franchise with a state "only" has the consequence of that corporate entity being administratively dissolved. While likely catastrophic for that specific corporation, if "Example Widgets Ltd." fails to be renewed, I can't come along and register "Example Widgets Ltd." on the corporate register and then ring up the bank of the former Example Widgets and say "hi there it's me Example Widgets please hand over checking account."

All of that said, I don't know if there's a better way to handle this. If we assume that domain names must expire--which we currently do, and I can make an argument for and against that assumption--then what's next? It's expired but never usable again?

Good thought experiment for the morning to take my mind off of COVID's impacts on transit funding.

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by jrockway on Wednesday July 08, 2020 @01:16PM (#23771918)
Pricing would have to change so that $5/year * infinity = (new price) * 4% compounding interest * infinity. That is possible to do, but it would be expensive.

(Nobody is going to give up their $5/year just because it's hard to get people to renew the domain. As losing blogspot.in showed, someone was willing to pay when Google couldn't be reached to give them a working credit card.)

Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by fragmede on Wednesday July 08, 2020 @11:14AM (#23770692)
IMO I'd like a required timeout for "lost domains" before a new owner is able to pick it up would help this situation, unless given the transfer code from the old owner.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by rtsil on Wednesday July 08, 2020 @11:40AM (#23770969)
There is. It's called a redemption period, and lasts 30 days. Many registrars also offer a grace period of a similar length before that.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by gregd on Wednesday July 08, 2020 @12:16PM (#23771322)
Information silos are an issue with every org at every level, not just with technical people. There are technological tools to help facilitate knowledge sharing (think enterprise wikis, password sharing, generic email inboxes, etc.) coupled with policies requiring things to be done a certain way (think register domains with this generic email acct., etc.). I find it interesting that companies don't put further effort into this...for exactly the reason in the original link.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by tgv on Wednesday July 08, 2020 @01:20PM (#23771962)
There's probably a long tail of domains bought, used once (if at all), and forgotten. The registrars aren't going to be happy holding these in some kind of quarantine.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by heavyset_go on Wednesday July 08, 2020 @10:53AM (#23770436)
Squatters would buy domains in bulk to sit on and rent out to the rest of us, and we'd end up with a similar situation to what we have now.
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by lub on Wednesday July 08, 2020 @11:34AM (#23770916)
employee (A) should've setup auto renewal
Re:Tell HN: Google drops blogspot.in, breaking hundreds of t... by crazygringo on Wednesday July 08, 2020 @12:51PM (#23771685)
Within a couple years your credit card will have expired. Auto renewal doesn't help at all here.