News for hackers. Stuff that matters.

A comment on DDOS on Namecheap Free DNS and Default DNS V2. Parent comment

Re:DDOS on Namecheap Free DNS and Default DNS V2 by sparagi on Thursday February 20, 2014 @12:49PM (#7272340)
If you use Route 53, your zone file is still at Namecheap (registrar). Doesn't that still make Namecheap a failure point?
[ Parent | on HN ]
Re:DDOS on Namecheap Free DNS and Default DNS V2 by daigoba66 on Thursday February 20, 2014 @12:56PM (#7272389)
No. The zone file lives on the nameserver (DNS server) which Route 53 provides. Namescheap registers a list of nameservers for your domain with the TLD.

An over simplified example for looking up "news.ycombinator.com":

1. First query the TLD nameserver for all ".com" domains asking for the authoritative nameserver(s) for "ycombinator.com".

2. Next query that nameserver for "news.ycombinator.com".

[ Parent | on HN ]
Re:DDOS on Namecheap Free DNS and Default DNS V2 by sparagi on Thursday February 20, 2014 @01:54PM (#7272779)
But, the first entry point is namecheap. The domain is at Namecheap, so it will not find the zone file at Route 53, if Namecheap does not send it there. Right?
[ Parent | on HN ]
Re:DDOS on Namecheap Free DNS and Default DNS V2 by colmmacc on Thursday February 20, 2014 @06:43PM (#7274468)
No, registrar's are your portal to updating data in TLDs, but those TLDs are each operated separately. .com and .net are operated by Verisign, for example.
[ Parent | on HN ]