Hacker News Reader

Comment by thenomad | Hacker News Reader

Given the extensive debunking of the security of all existing registrars in the post, I'd really love to know who CloudFlare were thinking of when they said

"There are plenty of great mass-market registrars."

Shortly after they said (I'm paraphrasing here) "we've just explained why your current registrar is insecure, but this shiny new secure service isn't for you, pleb!"

They offer an "audit your registry" service, which is great, but they have zero suggestions for good alternatives if you're not front page news.

View on HN

I bet that product is more expensive than we think. They can only afford to offer this as a feature of their enterprise product. But as a standalone offering I'm guessing it would cost more ($300-500?) than most people would be willing to pay for registration. Just speculating.

If they charge less than ~10k per year they're probably doing themselves disservice. My bet is on anywhere between 30k and 50k per year. Possibly more, you'll have to contact your account manager who knows exactly what's in your wallet.

If like to vote this up. I think that all of us (as individuals) would like a 'lite' version of this.

I want my domain to pass all those checks, and have 2FA protecting my account, but I don't care about the multiple permission to transfer since I'm just one person.

I also do care that there isn't some social engineering backdoor, where anyone can call support and answer a few questions about me (that might be ready to find) and reset my password. There are far too many services that are susceptible to such an easy hack.

Gandi and Namecheap have quite good security models for normal prices.

I can agree with this. Namecheap is fairly secure as far as a general, affordable registrar is concerned. I had trouble accessing my account because I didn't have very specific information that was difficult for me to track down in my emails. They also supported DNSSEC and Algorithm 13 before it was an option on CloudFlare, meaning I was able to take advantage of that day one.

We're thinking of offering a "lite" version of Registrar in the future, likely bundled with the paid version of our core service. Won't have all the bells and whistles of the "enterprise" version we launched this week, but it will be more secure than anything you can get from mass market registrars.

That's really great news, and I will be... well, given the speed with which Hacker News moves, about 40th in line to purchase it.

Reply on news.ycombinator.com