tomklein

I believe it was StartSSL and/or WoSign back then

Check https://docs.google.com/forms/d/e/1FAIpQLSdqYNuULEypMnp4i5pR... (linked from https://blog.cloudflare.com/friendly-bots/) if you didn’t already.

Disclaimer: I work at CF

iirc, custom DNS at CF refers to using your own subdomains as name servers for CF instead of the regular *.ns.cloudflare.com. Basically a form of whitelabelling.

Specifying 3rd party name servers as your domain’s name server was (still is?) not possible with Cloudflare Registrar.

(Disclaimer: I work there)

Amazon owns .free - http://nic.free/

Actually, you can assign (not transfer) IP ranges and the one advertising it does not need to own it, but would need a Letter of Authorization (LoA) or similar.

Google now has a publicly available ACME-compatible CA. For CF’s Universal SSL (default/free) Cloudflare may use Google’s CA. But may choose other providers. For Advanced Certificate Manager (paid addon), you can choose Google or other CAs for Cloudflare.

But basically Google would be the one that is issuing an SSL cert for a website. Same as LetsEncrypt.

Disclaimer: CF employee

Swapfiets builds their own bikes and does not - never ever - sell them. If one gets stolen, it can‘t be resold without one noticing it’s stolen, as these are not in circulation in the first place and still owned by the company that built them

Freenom has free TLDs (.tk, .cf, ….)

The cheapest over time will be .de with as less as 4€ a year depending on the registrar. The cheapest first year domain used to be .xyz with 0.99$ at Namecheap

I run my own email server an never had any issues with email deliverability. There must be a reason for these bounces. Any SMTP logs?

Wouldn’t the one publishing these PII on a website be in breach of the GDPR rather than Google who just crawls it?

Or alternatively, a DNS lookup + WHOIS of the IP to get the Abuse contact of the hosting provider

For CF, we send out these status pages manually. It's usually delayed due to wording, but not to tamper with the SLA. We do keep track of the accurate times AFAIK.

Disclaimer: I work @ CF

Glad to know that in such a catastrophical event, the military at least got permission to use Amazon Lumberyard for live combat.

Google LLC is a subsidiary of Alphabet Inc. Don’t know about Facebook/Meta though

What if the site owners change their SSL settings to Full SSL though?

Original Discussion: https://news.ycombinator.com/item?id=29810733

The first 1024 are reserved and you usually can freely choose the ones greater than that. You can also use .local for local domains.

Official blog post: https://blog.youtube/news-and-events/update-to-youtube/

Any dedicated server with a 1 Gbps connection will probably do, but it depends on your tech stack.

Sounds like a cool idea! Would love to try it out. Email is in profile

That’s what Certificate Transparency is for. If CT is required by the client, then the wrongfully issued certificate could be detected and the CA be reported for that.

Most of these DNS resolvers run on lots of servers instead of a single one. Whether it’s through load balancing, anycast, or other technologies.

I coded a GeoDNS for a couple of my sites and Cloudflare‘s IPs are always geolocated to the nearest datacenters and works great in a GeoDNS setting.

Also, what about DNS resolvers that don’t support EDNS at all?

Looks like the .club TLD is returning SERVFAIL errors on the DNS level.

Actually, I bought it right after you told me about it! It’s super interesting and I learned a lot from it

Do you have a couple of examples for well-designed UIs?

What I did after having argued several times is to straight up let them know that this isn’t true, told one or two examples on why these arguments are fake most of the time and that if they want to find arguments against it, that they would find some. Then I stop talking about such topics with them.

In my opinion, it‘s just not worth after having spent some time trying to discuss it with them. Especially when they don’t provide any backed arguments but just „random“ statements

Depending on what you’d like to do with it, you could get a server at a hosting provider that allows you to send in USB sticks with data and uploads it for you (makre sure the content is encrypted though) or get a colo with your own server which you then would have access to.

If you just need it as a cache as mentioned in another comment, you can go with a VPS

Subdomain points to a hosting provider. Hosting doesn’t know who the owner is (yet) and waits for someone to sign up/register. Attacker signs up before the real owner does, is lucky that the hosting provider does not verify ownership, and is able to serve whatever they want on the domain, for example a fake website or fake verification files.

I think one of the major advantages a tech company can have against their competitors is their culture and recently, Google seems to be losing out on this a lot. IMHO there is a huge difference between companies that just have workers and companies that are a group of people working towards a common goal/vision