Securing Your Domain Against Seizure: Where Is Safe to Register a Domain Name?
gun.io
gun.io
Gandi.net is an excellent registrar, but I'm not sure about them anymore since they now operate in the UK and US as well. They even have a US-incorporated subsidiary.
Not to mention the fact that the entire OP is based on the way things are TODAY and that assumes it's even accurate. Which of course it's not (just taking your comment as one of many which makes an important point about UAE.)
Most importantly things in the political world can change overnight.
.ch is Switzerland which is great everybody thinks. Guess what? Check out the way the Swiss caved into US demands on revealing those keeping money in swiss bank accounts. Those accounts were secret for a very long time. Then that changed.
http://www.time.com/time/business/article/0,8599,1917648,00....
The web's biggest sites right now (e.g. YouTube and Facebook) are doing things the U.S. government doesn't approve of. They haven't been shut down ... yet ... but Megaupload has, and what's the functional difference between what Megaupload does and what YouTube does?
My point is just that the way the U.S. gov't is going, no decent web application is safe from being taken down. Anything with user-generated content is basically wide open for seizure.
The difference, at an organisational level, is that MegaUpload is run by a very small team and is "foreign". Google/YouTube, on the other hand, is an American company employing a number of Americans.
The majority of voters probably care little about MegaUpload (even if they should care). But you can be sure they'd care if YouTube was shut down/the domain seized.
"If you owe the bank $10,000 and can't pay you have a problem. If you owe the bank $100,000,000 and can't pay the bank has a problem".
Size matters.
What this means functionally is that small startups who do the exact same thing as the industry giants will be the ones targeted and shut down. The logical conclusion is that, if you want to start a web application, it might be worth it to found and host your company outside the US.
You probably still want to check out your registrars reputation (and put valid info in the whois.) If your registrar has a 'shoot first and ask questions later' attitude, well, you are a lot more screwed than if, say, your web hosting provider is the same.
I mean, the article focuses on choosing your registry, but the registrar is the first point of contact for anyone trying to shut you down. Last time I looked (a few years back) to set up a registrar, you needed to pay a couple kilobucks annually to the registry, plus an additional $6.25 for every .com address you register... every year. With those kinds of costs, and the under $10/year price expectation of consumers, it doesn't take many complaints before what you have to pay humans to read them exceeds the amount of profit you could hope to derive from the customer. Reputation is the only motivation that business would have to do anything besides ignore the complaints until they could not be ignored any more, and then shut down the domain.
And valid contact info is important. You want people to complain to you, not your provider. Most of the time, the powers that be won't move without warning. I mean, yeah, depending on what you are doing, being contactable might not help and might even hurt, but for most things that are at least semi-legitimate, and certainly for anything you want to get venture funding for, being contactable helps a lot.
On that note, if you have /any/ user generated content of any type, pay your hundred bucks and get on the US 'Directory of Service Provider Agents for Notification of Claims of Infringement'
I mean none of this helps if the feds are really after you. But really, I don't know what would, in that case. Best you can hope for is to clear things up so that in the borderline cases they send you scary lawyer letters rather than shutting you down.
It was not that long ago that Ireland was seen as a booming example of economic growth. In a relatively short term that boom has turned sour.
The selection of a domain name is an integral part of your brand and that is LONG term.
Therefore short term fluctuations in economic success should play a muted part in your domain name decision.
The bottom line here is that the direct US controlled TLDs of .com, .net and .org are now slowly becoming poisonous in the branding decision for any company that may risk annoying the RIAA or MPAA with their new "fangled" business model that disrupts the existing media space or their profit margin (or perceived profit margin) in any way.
The US is shooting itself in foot, but personally I find that a good thing. I see this as a great step in reducing the prominence (and worth) of the core TLDs and ICANN.
I find it quite interesting that when it comes to .com names in particular we are coming towards a point where the saturation is so great, there are no viable domains left. Since land is not ubiquitous, saturation means that you are limited to trading those existing properties only, whilst with domain names, we can create a new TLD and start over again. It is like being able to create new land.
As a further analogy, we discover a new M class planet and some of us brave new worlders start moving there. Everyone living on Earth things we are mad (wtf, they have no Starbucks), but who cares right, we have a virgin planet to discover and plenty of new land to stake our claim upon. We get to choose the best bits of land for ourselves before all those Earthlings get fed up of living in their over-populated land and jump on star ships to join us.
It's not the cheapest option but it's not too pricey either.
Also that boiler you want to stick in, will need to be made of some exceptional heat resistant material. And probably be replaced very frequently. Not very easy and very expensive. :)
But Iceland do have a lot of geothermal steam based generators.
> Countries with military mutual defense agreements (NATO, etc).
And then he continues to name both Sweden and Norway...Norway is a NATO-member (though not part of the EU, just the EEA), and while Sweden is not a NATO-member, it is an EU member state, which means it is involved in EU-defence just as well...(and even though Iceland's economy has recovered well, they are also a NATO-member) Norway is definitely not militarily neutral, since they have troops in Afghanistan.
He also doesn't give a definition for what a "small"-sized or a "medium"-sized country is...
[edited for clarity/spelling]
Small countries are a poor choice for many reasons, not least because too much can change too quickly and it does not require much capital (monetary or political) to capture such a state. Though, obviously, they can be useful for redundancy.
That said, it could be the author meant the list more as optimization criteria rather than a firm checklist. In which case, both the strongly-independently wealthy Norway and the politically liberal and neutral Sweden, are not bad choices.
Just thought i'd point it out for those that might not know about their degree of international collaboration.
However, especially Sweden is ambiguous at best in my opinion, given their recently enacted strong wiretapping laws. They might not be a problem yet, but they provide the basis for future trouble.
Not to mention it's a "small" country (you can't get much smaller than an island)
EURid European Registry for Internet Domains) is a non-profit organisation established by the European Commission is a consortium of three European ccTLD operators: DNS Belgium (.be), IIT-CNR (.it) and NIC-SE (.se).
Am I missing something?
It took over a decade to get everyone on the same page re: IPv6, and everybody WANTS that. Be realistic. It ain't gonna happen, ever.
The real problem is the chicken/egg one, this is where all past attempts towards an alternate DNS have failed.
Hello again pessimism,
Our password field supports only passwords up to 16
characters at this time. All longer passwords
are truncated.
If you have any further questions, please let me know.
Sincerely,
[redacted]
Tier 1 Tech Support
Gandi US
I checked in with @theharmonyguy who says this is a pretty bad thing, and I originally intended to do an Ask/Tell HN post about it, but life got in the way.What are your thoughts on this and its implications for using gandi?
I registered the 26 letters of the alphabet for my password, and then tested re-logging in with the full 26 char version, the 26 char version + 1 char (a), the first 17 characters, the first 16 chars, and the first 15 characters.
abcdefghijklmnopqrstuvwxyza
abcdefghijklmnopqrstuvwxyz
abcdefghijklmnopq
abcdefghijklmnop
abcdefghijklmno
None but the original 26 character password worked, so apparently they don't truncate passwords at all, they're probably just hashing it down to 16 characters or whatever in the database, then comparing hashes on login attempt.
Their support guy is just playing fast and loose with the word truncate.
I mean, if they're hashing the password as they should, why the limit? It's stored as fixed length string anyway...
They have the most TLD offerings of any registrar I've seen (sans Go Daddy) so I'd hate to move away from them because of support issues, but I'm starting to understand the complaints I've read.
If someone knows a good non-American registrar with a wide selection of domains who also has two-factor authentication like Name.com, please let me know. Until then, I’ll probably just postpone the domain purchases.
Shame he did not cover or mention directly the highly popular .EU domain which has no particularly strong requirements.
While individual EU countries may fall under the NATO/ECHELON agreements under varying degrees of importance (Germany for example it is likely highly irrelevant), internet infrastructure tend to be well-protected at the EU level.
A single server isn't good for uptime because when it dies you're screwed. At the next level, a single data-center only gives you so much uptime because if that data center goes down you're screwed.
Same thing here. Any single TLD isn't safe for any number of technical and political reasons. If you want to be safe, register multiple tlds with multiple entities so you have redundancy.
I dont think the top level domains of these countries are secure at all.
However, one thing you have to keep in mind, that despite actually being a fairly large registar, they are a small company in bahamas. I would imagine, if they had a large target painted on them, they could not last long.
Getting a "secure" swiss domain name with a registrar in the USA isn't probably the best idea ;)
[1]https://www.loopia.com/domainnames/#prices [2]http://www.binero.se/doman [3]http://www.crystone.com/domainname.aspx
Obviously the exact gTLD we chose is subject to a bit of democracy, voting etc etc but I'm sure with a bit of an open forum then they'll be an interesting debate.
The only thing silly here is not taking into account all business risks. US-owned TLDs are very much now a risk.
Using the Internet is a risk. So is crossing the street.
Your single biggest risk in registering a domain name relates to the business practices of the registrar you choose. This has nothing to do with the "nationality" of a TLD.
You also face risks associated with the policy of the TLD you register in, the laws of the local government and the jurisdictions of the registrar, registry and DNS provider you register with.
You also face a myriad of risks associated with the UDRP and various intellectual property law.
You can either worry yourself silly with the boundary cases and outside risks that I see most talked about in recent HN articles or you can cover 99% of your issues by finding yourself a good registrar (one with fair and reasonable policies and practices) operating under a good government (one with fair and reasonable laws and law enforcement practices) and register in a reliable TLD. And then spend the other 23.5 hours in your busy day worrying about running your startup or doing something else useful with your time.