← Back to context

Comment by jsheard

2 years ago

That was a common racket a long time ago, but pretty much every widely recommended registrar offers free whois privacy now. At least when they're allowed to, some TLDs forbid obfuscating the whois information.

For example, *.us domain registrars aren't allowed to privacy protect your domain: https://www.reddit.com/r/webdev/comments/101qjbq/wow_never_b...

  • a little less than a year ago, my wife registered a .us domain that she ended up not using at all. she still gets phone calls nearly daily from people trying to sell her web design/dev work

  • Wow! These policies are like 30 years behind. Exposing your phone number and address on WHOIS makes absolutely no sense in this day and age!

    • According to German law every website who is owned and operated by a person or entity in Germany needs an imprint with full name, address, email address and phone number… (of the owner 2 owning entity)…

      3 replies →

    • At the same time, expecting that your NAP info isn't already in the hands of anyone who wants it makes no sense in this day and age.

      Between the countless DB leaks and numerous infostealer campaigns, and considering that anyone who has you in their contacts list is extending the exposed surface area, it's untenable. Other events like marriage and home ownership further complicate any attempt to keep your name and address private.

      Not saying you shouldn't opt for domain privacy, just giving a reality check. To really enforce your privacy you have to have multiple phone lines and a shell company, at the least. And really, even that isn't enough unless you can also commit to being a hermit.

      4 replies →

    • Exactly. All their info was scraped long ago. Whois and abuse info, it all needed to be depreciated a few decades ago. But, pity the poor fool who actually contacts me. I treat them like regular scammers. Get all the info, and then tell them to pound dirt.

      Except for the guy who tried to sell me annuity liquidation. Yes, if the person gets unalived earlier than expected, you win.

      In related news, I saw someone buy $150 worth of lottery tickets, as I was on the way to a large hospital to visit a sick friend. The lottery guy I am sure lost, and the hospital guy (profit-care) won, while the ward was understaffed( a profit-center). And 7 out of 8 fare collection machines were out of order ( deferred maintenance as a profit-center). I get the distinct feeling that corporate America, just does not even care in the slightest.

      For the organization that managed the WhoIs? The horse left the barn so long ago, it's great great great grand-children are old and gone. Long gone.

      Call me 1-800-555-1212.

    • Laws are crazy. The CAN SPAM act requires you to publish a physical mailing address in the email you send. It was an anachronism even when it was originally passed -- who wants to unsubscribe to email via physical mail? And yet it's still there, for no reason.

    • you just have to have enough money to have some legal entity register on your behalf and that legal entity then has their system spammed, but they have their phone public anyhow...

      the idea is to have individuals accountable while not annoying owners.

      in that sense it makes _perfect_ sense and works as intended.

      a proper solution ingredient would be trustworthy and affordable pseudonymity, and that can be lifted by court orders only. but then who guarantees the independence of courts? and the fairness of laws?

      we're in a tough ride.

  • I don't understand why people aren't using fake addresses for registering domains. I've had a few registered to 1001 Main St in my local town and a made up phone number for over 10 years now with no issue. Main Street will never be over 40 addresses for the foreseeable future and I can just update the record if need be.

  • So .us is more trustworthy than .com. Good to know.

    Im one of those that think that developers are hiding too much, which makes things like vs code extension viruses rampant.

    I wont force you to not be anonymous, but if you are going to run your software on my device I want some accountability. Our salaries should also reflect that.

    Im sure that this will be unpopular though.

    • >So .us is more trustworthy than .com.

      How do you come to that conclusion?

      >vs code extension viruses rampant.

      So far I haven't encountered a single actual virus, and if you're referring to the recent Material Theme debacle, there was never any malicious code involved, only third party libraries with obfuscation.

    • > So .us is more trustworthy than .com. Good to know.

      Be careful about concluding things like that.

      The TLD has a requirement that you publish your info. That doesn't mean they have any way of verifying it. If someone could prove that the info was false then they might lose the domain, but they also lose the domain if someone can prove that they're operating a scam. So the scammers just make up fake info and all the requirement is doing is impacting the privacy of honest people who want a .us domain.

    • I think I understand your point, but your wording leaves some ambiguity. If I am running my software on your device you must be a cloud provider. In that case, the accountability you are looking for is probably not provided in the same way it would be if you were running my software on your device.

      Either way, your aversion to anonymity of developers is interesting. It's a discussion for a different thread, but I think an important one.

      3 replies →

    • I agree, although is the domain system really the best way to do that?

"E-ZPass Outstanding Toll Notification

Dear User,Our system has identified an unpaid toll charge linked to your vehicle. To avoid additional fees or service disruptions, please settle this matter within 12 hours.

https://e-zpass.org-qrh.xin/indexshtml"

Best of luck trying to get an unknown Chinese registrar to stop their spam. My carrier does not even have a clue. My routers now block anything *.Xin. Anything and everything.

  • Apparently, Xin has not learned about hiding info: bj#xinnet.com (Change the # to an @ ). Some how someone lists it as "Elegant Leader Limited"

> but pretty much every widely recommended registrar offers free whois privacy now

If you go by the book e.g. Cloudflare not every field (e.g. state and country) is hidden. So not exactly.