6 ms·

We've just published a postmortem: https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-domains-blocked-by-registrar https://blog.gitbook.com/tech/post-mort

We've just published a postmortem: https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-domains-blocked-by-registrar https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-dom... let us know if you have any questions!

dang 6y ago
Ok, we'll change the URL from https://twitter.com/GitBookStatus/status/1268528465990619137 https://twitter.com/GitBookStatus/status/1268528465990619137 to that. I know it moves the rug under the existing discussion, but it's better than having two separate threads.
umvi 6y ago
Seems like you should also move off of Google Domains, unless you have some compelling reason to use them.
- eat_veggies 6y ago
  In the postmortem it states that they are moving to Cloudflare
  - walrus01 6y ago
    ahh yes, the more ethical choice to move to well known hosters of DDoS protection for white supremacist sites and literal nazis. Why not move to a company that is just a domain registrar.
    - _jal 6y ago
      Why not stick to the topic at hand, rather than trying to hijack the discussion?
      - walrus01 6y ago
        The topic at hand is where to move a domain out to, and whether said company is one that can be relied upon to act ethically and responsibly. I don't see the difference.
        deleted 6y ago
        [deleted]
      - dogecoinbase 6y ago
        What makes you think that overall ethical behavior of a domain registrar is not relevant to the topic at hand?
    - recursive 6y ago
      I'm pretty sure anyone cause cloudflare's DDoS protection. It's not limited to a particular political persuasion.
    - jayshua 6y ago
      I mean, if you're switching registrars because the last one banned your domain that almost sounds like an endorsement.
      - walrus01 6y ago
        From a purely pragmatic standpoint you're not wrong.
    - fennecfoxen 6y ago
      I thought Cloudflare was more about saying "we were wrong to try to be the world's speech police, and will never again bow to public pressure and take away DDOS from literal Nazis" and then taking down 8chan and other literal Nazis anyway because of public pressure.
  - jeffbee 6y ago
    I'd like to interrupt all the sanctimonious blathering in this thread to note that Cloudflare domain registration terms and conditions are almost a verbatim copy of Google's, and includes the same unilateral cancellation clause for phishing. Cloudflare: "Cloudflare and Registry Operator may deny, cancel, suspend, transfer, redirect or modify the Registrar Services or a Registration, or place any domain name(s) on lock, hold or similar status, as either deems necessary, in the unlimited and sole discretion of either Cloudflare ... for distributing malware, abusively operating botnets, phishing, piracy, trademark or copyright infringement, fraudulent or deceptive practices, counterfeiting or otherwise engaging in activity contrary to applicable law." Google: "We may in our sole discretion, deny, suspend or cancel any registration or transaction, or place any domain name(s) on registry lock, hold or similar status if ... engaging in spam, phishing, or other deceptive practices."
    - bashinator 6y ago
      I think the primary issue with Google Domains here is not that they have these kinds of terms, but that they enforced them in a particularly incompetent way. The original report of the phishing site was over a week old and had already been resolved, when google shut down the domain. Hopefully the people at Cloudflare are a bit better at their jobs.
      - jeffbee 6y ago
        Oh, I don't know that we have enough unbiased information to conclude what you concluded. One of the first comments posted in this thread today was "Is it related to the countless phishing pages hosted on your service?" from which we can deduce that the phishing problem on Gitbook is well-known to random members of the public.
jtl999 6y ago
Think you should investigate other options such as the known brand protection/domain asset management companies (MarkMonitor, CSC, easyDNS or their European equivalents) EDIT: I see you're moving to Cloudflare, but I wish you the best of luck
cirno 6y ago
I'm curious how you feel about CloudFlare as a registrar not allowing GitBook to use an external root nameserver. Being forcibly stuck on CloudFlare's own nameservers only sounds very nefarious, and isn't a limitation I've ever heard of with any other registrar. For instance, it would break my tooling that uses my host's APIs to control DNS records through their nameserver. I'd be very appreciative if eastdakota or jgrahamc could elaborate on what possible reasoning there is for this restriction as well.
- sozy777 6y ago
  Exactly, huge red flag. Google domains it's risky because they can ban your entire Google account including personal Gmail and any linked business ones. Can be pretty bad I'd say.
- DenseComet 6y ago
  Cloudflare sells the domain at cost. I think the idea is that its an extra service meant for their customers, not a service for the general public. As they are a DNS provider, their customers will use cloudflare nameservers. If they didn't, they would no longer be customers.
  - cirno 6y ago
    That does make sense. If I were using Cloudflare I suppose it would be a no-brainer, and if I were Cloudflare and didn't want people not routing their traffic through me on my registrar, that would be an excellent way to discourage it. If they're forced to offer to everyone as part of being a registrar, then the combination of all of the above is my answer. Thanks!
mmglr 6y ago
How did you arrive at choosing Cloudflare? It's clear Google Domains has broken processes not conducive to running a business centered on user content. How do you know Cloudflare does not suffer from similar broken processes?
- odensc 6y ago
  I doubt CloudFlare Registrar would be better in terms of customer support—unless said customer has an Enterprise plan—as their prices are just the registry + ICANN fee, no surcharge for them to make money. Doesn't seem conducive to great customer support, but maybe I'm wrong cause I've never had to contact them.
  - vsl 6y ago
    Two years ago, support for paid (peanuts-level, $20/mo?) plan was... not great.

dang 6y ago

Ok, we'll change the URL from https://twitter.com/GitBookStatus/status/1268528465990619137 https://twitter.com/GitBookStatus/status/1268528465990619137 to that. I know it moves the rug under the existing discussion, but it's better than having two separate threads.

umvi 6y ago

Seems like you should also move off of Google Domains, unless you have some compelling reason to use them.

eat_veggies 6y ago
In the postmortem it states that they are moving to Cloudflare
- walrus01 6y ago
  ahh yes, the more ethical choice to move to well known hosters of DDoS protection for white supremacist sites and literal nazis. Why not move to a company that is just a domain registrar.
  - _jal 6y ago
    Why not stick to the topic at hand, rather than trying to hijack the discussion?
    - walrus01 6y ago
      The topic at hand is where to move a domain out to, and whether said company is one that can be relied upon to act ethically and responsibly. I don't see the difference.
      - deleted 6y ago
        [deleted]
    - dogecoinbase 6y ago
      What makes you think that overall ethical behavior of a domain registrar is not relevant to the topic at hand?
  - recursive 6y ago
    I'm pretty sure anyone cause cloudflare's DDoS protection. It's not limited to a particular political persuasion.
  - jayshua 6y ago
    I mean, if you're switching registrars because the last one banned your domain that almost sounds like an endorsement.
    - walrus01 6y ago
      From a purely pragmatic standpoint you're not wrong.
  - fennecfoxen 6y ago
    I thought Cloudflare was more about saying "we were wrong to try to be the world's speech police, and will never again bow to public pressure and take away DDOS from literal Nazis" and then taking down 8chan and other literal Nazis anyway because of public pressure.
- jeffbee 6y ago
  I'd like to interrupt all the sanctimonious blathering in this thread to note that Cloudflare domain registration terms and conditions are almost a verbatim copy of Google's, and includes the same unilateral cancellation clause for phishing. Cloudflare: "Cloudflare and Registry Operator may deny, cancel, suspend, transfer, redirect or modify the Registrar Services or a Registration, or place any domain name(s) on lock, hold or similar status, as either deems necessary, in the unlimited and sole discretion of either Cloudflare ... for distributing malware, abusively operating botnets, phishing, piracy, trademark or copyright infringement, fraudulent or deceptive practices, counterfeiting or otherwise engaging in activity contrary to applicable law." Google: "We may in our sole discretion, deny, suspend or cancel any registration or transaction, or place any domain name(s) on registry lock, hold or similar status if ... engaging in spam, phishing, or other deceptive practices."
  - bashinator 6y ago
    I think the primary issue with Google Domains here is not that they have these kinds of terms, but that they enforced them in a particularly incompetent way. The original report of the phishing site was over a week old and had already been resolved, when google shut down the domain. Hopefully the people at Cloudflare are a bit better at their jobs.
    - jeffbee 6y ago
      Oh, I don't know that we have enough unbiased information to conclude what you concluded. One of the first comments posted in this thread today was "Is it related to the countless phishing pages hosted on your service?" from which we can deduce that the phishing problem on Gitbook is well-known to random members of the public.

jtl999 6y ago

Think you should investigate other options such as the known brand protection/domain asset management companies (MarkMonitor, CSC, easyDNS or their European equivalents) EDIT: I see you're moving to Cloudflare, but I wish you the best of luck

cirno 6y ago

I'm curious how you feel about CloudFlare as a registrar not allowing GitBook to use an external root nameserver. Being forcibly stuck on CloudFlare's own nameservers only sounds very nefarious, and isn't a limitation I've ever heard of with any other registrar. For instance, it would break my tooling that uses my host's APIs to control DNS records through their nameserver. I'd be very appreciative if eastdakota or jgrahamc could elaborate on what possible reasoning there is for this restriction as well.

sozy777 6y ago
Exactly, huge red flag. Google domains it's risky because they can ban your entire Google account including personal Gmail and any linked business ones. Can be pretty bad I'd say.
DenseComet 6y ago
Cloudflare sells the domain at cost. I think the idea is that its an extra service meant for their customers, not a service for the general public. As they are a DNS provider, their customers will use cloudflare nameservers. If they didn't, they would no longer be customers.
- cirno 6y ago
  That does make sense. If I were using Cloudflare I suppose it would be a no-brainer, and if I were Cloudflare and didn't want people not routing their traffic through me on my registrar, that would be an excellent way to discourage it. If they're forced to offer to everyone as part of being a registrar, then the combination of all of the above is my answer. Thanks!

mmglr 6y ago

How did you arrive at choosing Cloudflare? It's clear Google Domains has broken processes not conducive to running a business centered on user content. How do you know Cloudflare does not suffer from similar broken processes?

odensc 6y ago
I doubt CloudFlare Registrar would be better in terms of customer support—unless said customer has an Enterprise plan—as their prices are just the registry + ICANN fee, no surcharge for them to make money. Doesn't seem conducive to great customer support, but maybe I'm wrong cause I've never had to contact them.
- vsl 6y ago
  Two years ago, support for paid (peanuts-level, $20/mo?) plan was... not great.