Namecheap vulnerability they refuse to fix: no 2FA on support portal login

Re:Namecheap vulnerability they refuse to fix: no 2FA on sup... by dawnerd on Sunday August 28, 2022 @08:26AM (#32627852)

I’m really glad I migrated off Namecheap. Was a long time customer but when they had that massive dnssec outage and their support had no idea what it was doing, that was the last straw for me. I moved everything over to google (I know I know) and haven’t had a single second of downtime. Would love ideas for better alternatives, preferably privacy oriented.

[ Parent | on HN ]

Re:Namecheap vulnerability they refuse to fix: no 2FA on sup... by conjuredbytes on Sunday August 28, 2022 @08:45AM (#32627987)

I’ve been using gandi.net for years. They seem to care about playing by the rules and supporting privacy if their supported projects is anything to go by: https://www.gandi.net/en-US/gandi-supports

[ Parent | on HN ]

Re:Namecheap vulnerability they refuse to fix: no 2FA on sup... by lucasverra on Sunday August 28, 2022 @11:36AM (#32629203)

+1 for gandi.net's reputation. 10y straght of good service

[ Parent | on HN ]

Re:Namecheap vulnerability they refuse to fix: no 2FA on sup... by Ayesh on Monday August 29, 2022 @04:46AM (#32636019)

> dnssec outage

DNSSEC signing happens at the nameservers run by the registry (verisign for .com, for example). Unless it was an issue with their API servers not properly calling the upstream APIs, I don't think namecheap is to blame here.

I personally think namecheap is dangerously close to being the next Godaddy, but I wouldn't hold DNSSEC issues against Namecheap any other registrar.

[ Parent | on HN ]

Re:Namecheap vulnerability they refuse to fix: no 2FA on sup... by dawnerd on Monday August 29, 2022 @12:01PM (#32639804)

It’s been a while but I recall it was a Namecheap issue.

https://ianix.com/pub/dnssec-outages/20190221-namecheap/

[ Parent | on HN ]