← Back to context

Comment by brown

2 years ago

RDAP replaces WHOIS, offering a more technologically advanced way to discover the domain is protected by privacy services.

Domain whois is useless, but IP whois is at least kind of useful to check before blanket banning entire IP ranges.

  • Interestingly, when discussing WHOIS with my networking students, I discovered .edu WHOIS is not (cannot?) hidden. I suppose EDUCAUSE either requires WHOIS to remain open or they do not offer information hiding.

    Doing some WHOIS lookups, we found a point of contact at a university, called the network admin said hello and launched into an impromptu network admin interview. It was cool stuff. I emailed him later in the day to apologize to and thank him for being a good sport about the whole thing. He (fortunately) found it all rather enjoyable.

    • Some other TLDs, like .us and .in, also forbid WHOIS privacy. TLD owners are free to set whatever policy they want around this. Perhaps .edu does the same.

  • It's useful for checking if a domain name is taken without doing that through a registrar, which is both less convenient, and (in case of shitty registrars) can be sold to domain speculators.

  • whois/rdap is very useful to identify if a domain is registered or not, and if so with whom. still lots of use there without pii data.

Both give you a way to find out the domain's registrar, registration date, transfer status, and administrative contacts like abuse@. Nameserver data can also be somehow useful.

Otherwise, what did you expect the registrar to divulge to you, a random passer-by?

I get the joke, but whois is super valuable for abuse report contact and for registrar and even ip block info!

Huge protocol for cybersecurity