← Back to context

Comment by rationalist

6 hours ago

Dynadot

It asks you to choose 4 (four!) "secret questions" as a "security" measure. I decided that keeping your domains with an organization that insists on idiotic practices that are firmly forbidden by every sensible security practices guide (OWASP, NIST 800-63, anything, really) since like 2015 is not a very wise choice.

  • Tell that to the banks, alarm companies, etc that do the same thing :-/

    I just always use a plausible but false and unique answer, which I just keep track of in my password manager.

    • You do you, but that is enough of a red flag to actually mention when somebody recommends Dynadot to everyone else without much elaboration.

      Also, banks are really different from domain registrars in several important and relevant respects, but, for the record, I don't have to tell it to the banks I use, and if I did, I'd probably be looking for a bank that I don't have to tell it to.