Cloudflare Registrar
cloudflare.com
cloudflare.com
I transferred five domains from Namecheap, and four of them went through within an hour. The fifth was in a pending status. I was charged a one year renewal for each domain as part of the transfer process.
The fifth domain hadn't transferred after a few days so I filed a support ticket. They told me it could take up to 15 days.
After roughly 30 days, I was billed _again_ for a one year renewal of that domain which is still on Namecheap (unlocked), and still pending transfer. Registrar has now charged me $90 (.io domain is $45/year) for a domain _which they do not control_, and this has obviously not been reflected in the domain expiration date.
I contacted support again and they issued me a $45 refund, but the domain is still not transferred... not sure what to do at this point. (ticket #1657921 if anyone from CF is reading this)
I'm looking at your ticket now; will make sure this gets solved today.
Granted, I've never needed to call support, but losing my domain would be a huge disaster with no website, no email, and cost me hours of time. I see no reason to risk anything to save $5 a year
My main gripe is that I wish they would include free SSL and they give their UI some love but that's minor as I only access it on certain occasions.
It's 1 day job, probably button image or form URL includes 'ad' or something.
I've chosen to pay an extra $0.50 or so per domain to Porkbun for the option of using other nameservers.
There's several other features I find missing compared to a more mature registrar, but hopefully they'll get there eventually. For now, I'm moving my low-importance domains over to it for the cost savings, but will keep my primary domains under GoDaddy.
I've also had a billing issue with Cloudflare Registrar. I transferred two domains and paid the renewal fee, and two months later was charged for the same domains again. They've since issued a refund after I raised a support ticket (still waiting on that to hit my card), but the fact that it happened at all is worrying to me.
Granted I was in early access so I expected some things not to be polished yet, but these are pretty critical areas to get right as a registrar. And since my billing issue happened just last week I doubt that issue has been fixed with the general release.
So I'm going to hold off on transferring more domains until it matures, or just stick with Gandi.
To allow a third party to modify the DNS (eg pfSense dynamic DNS client) you have to use an API key that has full access to modify everything in your Cloudflare account. You can’t limit the type of operation and you can’t scope it to a domain. That’s nuts.
https://community.cloudflare.com/t/io-domain-price-not-whole...
Also, just to be sure U2F is an additional methods of 2FA, not the only method of 2-step, so to me having U2F is not necessarily making accessing your account securer.
Google, Amazon, Gandi (and some others I can't remember off the top of my head) support U2F.
>having U2F is not necessarily making accessing your account securer.
I don't agree with that at all. There are numerous cases of various 2FA methods being taken advantage of. No one has yet managed to crack U2F.
So, an attacker can just target the weaker factor and ignore U2F.
I certainly had the same thought.
Sure your TOTP might remain, but you're not using it, so it's not liable to be taken.
"Literally cannot get phished" is woefully far away, because the phishing-resistant property of U2F has a giant hole in the side of it (fallback factors) and therefore still relies on human vigilance.
I do use U2F though, because it is pretty convenient.
They do not. They support 2FA through TOTP only.
* https://www.cloudflare.com/tld-policies/
Crikey there's a lot of stuff out there. Seems that ICANN has approved just about any random word in the English language.
The Nominet requirements do cause these to break mysteriously much more often than some generic TLD spun up yesterday by people convinced this is a gold rush (e.g. my registrar offered me a great renewal deal for a .co.uk I control, I pressed "Yes please" and then their system believed I had taken the deal but didn't renew the domain, after a few days they confirmed that the deal makes no sense for .co.uk and refunded the money, they had forgotten to blacklist Nominet when adding their deal feature), but it works well enough most of the time.
- https://developers.cloudflare.com/registrar/domain-registrat...
Nominet is a bit of closed-shop with strong links to existing UK-based registrars. I may be too cynical but I just get the feeling that they'd see Cloudflare as too much of a threat?
For example, the annual cost of a .space domain during transfer is $15.18 (it was $17 two months ago), while renewal for the same domain at Namecheap costs $9.06.
To be fair Namecheap lists it as a discounted offer, but that appears to be always the case for the .space TLD renewals.
I was told to take the $15.18 Cloudflare deal, not the $9.06 Namecheap deal.
Years ago (13, to be exact) when I was young and didn't know anything and couldn't afford to buy a parked .com that made more sense, I registered a .ws domain at Godaddy of all places. It has subsequently become the e-mail address I use for everything.
Unfortunately, .ws doesn't really allow transfers. Now that there are all these non-evil registrars popping up, I'd like to switch to one of them, but I can't. Does anyone have any ideas about what if anything I could do? I suppose I could by another domain and forward the e-mail, but the whole point of having my own domain was that I wouldn't have to switch again :(
> Can I transfer my domain to another registrar?
> Yes, .WS domain transfers may take place in accordance with ICANN's "Policy on Transfer of Registrations between Registrars". Please contact the registrar you would like to transfer to for instructions on how to proceed.
If you try, they all give you the same "The WS registry doesn't allow transfer of domains." error, because historically they have not.
I personally would never trust anyone else.
It's been a few months since launch, but I still can't use my own nameservers for the domains.
While the registry-pricing can often workout cheaper, some registrars negotiate nicer deals with the registry. I have a .me domain for 8 years that I never paid the registry standard price, it has always been sent discounted rate.
May consider moving most of my domains over all the same though.
(I'd move my other domains here if I could use non-Cloudflare nameservers, even temporarily. I don't want downtime or other interruption.)
They don't host your site, but they'll mirror the front-end on their CDN to speed it up. They'll handle your DNS and TLS certs, and even your domain name, even though they aren't (yet) in the business of selling either.
Pretty much everything Google and Amazon offer as side services Cloudflare offers for free to some extent, and then charges for enhanced versions of those products.
Namecheap can block transfers with WHOIS Guard enabled in some cases; as soon as it is transferred to Cloudflare, though, the info will be redacted.
Would be great to allow users to purchase domains for use on a platform...
In fact the sole problem I've had, is with another registrar. I've had my domains with GoDaddy for 15 or 17 years. I've never had a problem with them, so it was fine, but they've begun seriously pushing their prices up (now about double what Cloudflare is charging). All the transfers from GoDaddy to Cloudflare went super smooth, took minutes, except for one high-value domain I've owned since the 1990s. GoDaddy is quasi attempting to hold that hostage, they put it through some kind of manual transfer intervention that will take a week to complete (hopefully).
https://hn.algolia.com/?query=cloudflare%20registar&sort=byP...
From what I can see, their senior leadership genuinely believes that, morally, they have an obligation to provide services for horrible people in exchange for money[1]. If you agree, use them! But if you think it's bad to defend these sites in an era of white nationalist terrorism, look elsewhere.
[1] https://www.wired.com/story/free-speech-issue-cloudflare/
Also, being a CF customer means sharing the same serving nodes as all those “interesting” websites. Some people are fine with that, others may not be.
I upvoted you since Hacker News is protective of CF for obvious reasons. I don’t see why this isn’t open for debate.
Freedom of speech means freedom of speech you don't agree with. There is no need to protect speech most people disagree with. FYI, the ACLU has also protected the same people you refer to. The problem with taking away civil liberties, is that eventually it will come down to losing your own.
For example, if you want the government to shut down speech it doesn't like, what happens when opposing views are in power, and Donald Trump decides he doesn't like what YOU are saying. Do you really want to go there?
You may note that Cloudflare is not a government.
And while, the First Amendment doesn't provide protection from private parties, it is still possible to agree with Free Speech rights as a private company, even if you disagree with the message. The problem is when you start shutting down conversations, you become part of the problem.
The likes of Twitter and Facebook, as an example are FAR more powerful than any government or localized platform traditionally protected, and may be considered Private Spaces for Public Use, which have been defined before (ref: Occupy Movement).
Just because you are a private entity does not mean you are free to do anything you want. The government has LOTS of limitations on what businesses can or can't do. Unless you are suggesting that businesses should never have to comply with disability laws, or laws regarding other protected classes too?
The day that happened I lost faith in American Internet, and actually now advocate for regulation of registrars and companies like cloudlfare - when you corner so much of the market (through low pricing using google's resources and others) for protecting transmission of data / information and you start blocking data on whims - you are no better then [insert other censorship regime here] -
they are not the only ones, godaddy has shown itself as a censor for various groups and so have others.
I can understand refusing to be a host / disabling hosting, but as far as data transmission, domain name registrars and similar internet functions, it should be let everything through and don't get involved imho.