Porkbun sells out – Starts requiring Age ID despite no legal requirement | Hacker News Reader

Porkbun sells out – Starts requiring Age ID despite no legal requirement

kb.porkbun.com

37 pointsevolve2k21 comments

I've long been a big fan of Porkbun, switching over to them from namecheap who I supported from back in the SOPA era. But today Im very frustrated. A friend of mine was required to go through Age ID. This is in Australia and is despite there being no legal requirement to ask for Age ID on domains in Oz.

Yes Age verification for social media was recently enacted into law; but I think we should expect that good companies don't self opt into additional systems of surviellance until such time as they are legally compelled and at the very least have exhausted other options.

It stings harder as I had porkbun pegged as one of the companies standing up for users and pushing back against a surviellance web. Angry and frustrated.

This is troubling because I also left namecheap for porkbun some years ago. While porkbun is good I am willing to move my 50+ domains to a worthy alternative when the time comes, however for now I’m going to wait and see how this story unfolds.

Also what are some good alternatives to porkbun?

The title is "Why Does Porkbun Require ID Verification for Some Accounts?", and there's no suggestion that it's due to age, the reason given is abuse and fraud.

See what Zuckerberg is talking about, like right now on internet wide compulsory "Age" ID verification, this unforced move by porkbun very relevant.

Similar to LinkedIn's "verified" process, Porkbun uses a 3rd party: veriff.com. https://www.veriff.com/privacy-notice.

It appears that Veriff's data retention is set by their customers (in this case Porkbun). Porkbun's policy says that this information is deleted as soon as they have verified that you "pass." They aren't quite as explicit as saying that they require Veriff to delete it that quickly.

Unfortunately there's a giant loophole in Veriff's policies (emphasis mine):

  (5) Fifth, we store Personal Data only for as long as the retention of data is required by law, a contract *or is necessary for the provision or development of our Services or required for protecting us against legal claims.* At the end of the retention period, we shall permanently erase the Personal Data or anonymize it.

This is very dissapointing as I switched to porkbun recently to avoid using anything the monopoly Crazy Domains (Dreamscape) owns.

"or anonymize it" means they would never opt to delete it and never will. Theres zero financial benefit to them deleting it other than honoring the customers privacy which they have clearly calculated is not profitable for them. Here's hoping this trend massively backfires across industries.

That's not selling out. They explain that it's to combat abuse and that this was not their first choice.

By all means move to a different registrar, but deliberate honestly. They are not requiring ID/face scans for the same reason Discord and Roblox are, as your framing suggests.

Sorry to be clear. When you are arbitrarily ask to verify your account not with email verification or robots stuff or a myriad other options; when they reach for age verification as the first thing; and giving up ur gov ID is the only way forward desk okey this never being the best approach to fraud prevention going right back, then yeah this is selling out.

You need to learn what that phrase means.

What's occuring is compulsory government ID verification from services that are not yet even legally obligated to do so. What its been sold as is "Age ID", politically consider these things synonymous right now.

The title here seems both editorialized and inaccurate?

They’re asking for IDs as an anti-fraud measure, not an age check.

Drill into the current news cycle. Zuckerberg is pitching an 'age verification required' internet. LinkedIn and now Porkbun are both falling in line, pre-emptivley. No this is not a done deal. We need to squark if we dont want this.

Legislation is one thing, this is a bad faith move, just dressed up as normal business. It's not.

Do you have anything other than vibes to base that on?

"Porkbun requires ID verification" is a better title.

Is this a domain registrar? I would think giving them your id would be in your interest...

Should be optional not enforced as the only option.

Why would it be in my interest?

The registrars I use are limited because of KYC. the network of registrars under dropcatch all require KYC. Many of the auction sites require KYC.

The problem is they hold faces+IDs indefinitely and the ones I needed have breach issues along with indicators of top of the line 2005 era security practices.

So for me, its less about the KYC and more about their inability to KYC responsibly.

Who isn't collecting biometric data using shady sites nowadays? Even Hetzner wanted to match my id with a selfie using some really shady site that almost certainly violates gdpr… What's next, will I have to send a stool sample to view posts on Twitter?? Funny how that's not even unlikely nowadays, with slippery slope becoming less of a fallacy and more of a universal law…

Please drink a verification can.

Stool samples would be an improvement over the Augean stables that is Twitter.

Reply on news.ycombinator.com