TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Njalla – A privacy-aware domain registration service

116 点作者 TonnyGaric大约 8 年前

19 条评论

mattzito大约 8 年前
&gt; When you purchase a domain name through Njalla, we own it for you. However, the agreement between us grants you full usage rights to the domain. Whenever you want to, you can transfer the ownership to yourself or some other party.<p>That&#x27;s extremely concerning, given that the domain name industry has a very robust set of regulations and legal procedures to govern privacy, mediate dispute, and establish consumer rights. I&#x27;d be very concerned about what this relationship between Njalla and myself would do to those protections - they&#x27;re not a registrar, nor are they a reseller - what am I actually paying them for?<p>Unfortunately, the ToS and&#x2F;or registration agreement that I am signing up for doesn&#x27;t appear anywhere that I was able to find. I went through the purchase flow to try to buy a domain, but it won&#x27;t let me proceed without funds in my wallet, and I&#x27;m not going to put 30 euro just to try and read a legal doc.<p>In other words, this seems like it&#x27;s Probably a Bad Idea(tm), though it&#x27;s difficult to know without more transparency on their part. (full disclosure: I work for a company involved in the domain industry)
评论 #14177820 未加载
评论 #14177788 未加载
评论 #14177787 未加载
评论 #14178317 未加载
评论 #14178383 未加载
jaclaz大约 8 年前
Isn&#x27;t it queer that &quot;right-wing extremists&quot; are seemingly prohibited from expressing their own &quot;political weird thinking&quot;?<p>&gt;Think of us as your friendly drunk (but responsibly so) straw person that takes the blame for your expressions. As long as you keep within the boundaries of reasonable law and you&#x27;re not a right-wing extremist, we’re for promoting your freedom of speech, your political weird thinking, your kinky forums and whatever. Even Trump is welcome. Hell, he might even be a customer. We’ll never know. We might even be approved by him! Or not. We don’t really care.
评论 #14178352 未加载
评论 #14177979 未加载
评论 #14177987 未加载
评论 #14177991 未加载
评论 #14182795 未加载
评论 #14179569 未加载
评论 #14177971 未加载
评论 #14177955 未加载
wlkr大约 8 年前
Another similar service which has been around for a while is PRQ [0,1] which was created by Gottfrid Svartholm and Fredrik Neij, both founders of TPB. PRQ offer far more than just domains and accept payment via BTC. They also have a proven track record of hosting extremely controversial content.<p>[0]: <a href="https:&#x2F;&#x2F;prq.se&#x2F;" rel="nofollow">https:&#x2F;&#x2F;prq.se&#x2F;</a><p>[1]: <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;PRQ" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;PRQ</a>
评论 #14179131 未加载
评论 #14178619 未加载
GBiT大约 8 年前
Main selling point of Njalla is that one of its founders is ex ThePirateBay guy, Peter Sunde who fights for privacy and creating privacy related services. He is a co-founder of Flattr. So it is more of a trust service.
brey大约 8 年前
&gt; As long as you keep within the boundaries of reasonable law<p>that&#x27;s pretty subjective.
评论 #14177801 未加载
评论 #14177812 未加载
interfixus大约 8 年前
Handing over my domain control to some hazy third party?<p>Some hazy third party in <i>Sweden</i>, where top officials up to and including government ministers vocally promote the idea the idea of internet censorship, and where people have actually been sent to actual jail for voicing opinions.<p>I think I&#x27;ll pass.
评论 #14178125 未加载
评论 #14178127 未加载
marjans大约 8 年前
lol I made almost the same thing earlier this year and everyone told me that it&#x27;s never going to work out (it also didn&#x27;t because I&#x27;m getting like 0 visits) <a href="http:&#x2F;&#x2F;anonname.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;anonname.com&#x2F;</a>
评论 #14178136 未加载
评论 #14178034 未加载
Artemis2大约 8 年前
How do people concerned about security here register their domains? Security of some registrars seems extremely spotty and nobody really talks about how they&#x27;re safer to use than the competition, but domains are a huge single point of failure. Maybe there is space for a specialized service, something close to Cloudflare Registrar (<a href="https:&#x2F;&#x2F;www.cloudflare.com&#x2F;registrar&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.cloudflare.com&#x2F;registrar&#x2F;</a>)?
feld大约 8 年前
This is good. The closest I&#x27;ve been able to get to anonymous ownership is buying a domain on Gandi and then delegating all roles except Owner to another Gandi account under a fake name. This way I never show up in WHOIS at all but I guess Gandi still knows who bought it (I didn&#x27;t use bitcoin)<p>I really want to see more of these kinds of services. Anonymity is important.
评论 #14178151 未加载
nolok大约 8 年前
I see that they are offering the .fr TLD, for which such anonymity is illegal as far as I know (eg even OVH as a registrar and they OwO service which display OVH as the owner to be contacted and then transmit contact to you is not allowed).<p>I guess the difference here is that they don&#x27;t hide the real owner behind a &quot;contact us to get through&quot; as they are themselves the real owner, so they might be legal, but then comes the question of &quot;do you really want someone else to be the legal owner of the domain of your website&quot;.
评论 #14178284 未加载
评论 #14178129 未加载
uiri大约 8 年前
.ca solves this issue by not publicly publishing the details of individual registrants in the Whois system. CIRA still keeps a record so that they know who the owner of the domain is. Corporate&#x2F;organizational registrants still have their contact information made public.<p>Is there a reason why Njalla is better than this reasonable system?
Sophira大约 8 年前
They don&#x27;t seem to be very interested in listening to feedback:<p>&gt; We&#x27;re sure it&#x27;s the best there is, but since we&#x27;re always improving, we&#x27;ll pretend to listen to your feedback and make it better.<p>Openly saying that they&#x27;ll only &quot;pretend&quot; to listen to feedback doesn&#x27;t fill me with confidence.
评论 #14178172 未加载
dijhrykl大约 8 年前
This is an interesting idea executed terribly. Obviously there are huge liabilities associated with this kind of proxying, but for people which want or need highly anonymous domain registration it could be a worthwhile idea if backed up by an adequately robust contract.<p>The issues: firstly, they don&#x27;t support freedom of speech:<p>&gt;As long as you keep within the boundaries of reasonable law and you&#x27;re not a right-wing extremist, we’re for promoting your freedom of speech<p>Secondly, they don&#x27;t make it clear in what jurisdiction they operate.<p>Thirdly, they don&#x27;t specify anywhere what registrar(s) they use to register domains. This prevents customers from performing due diligence on the registrar and its history (for example, does the registrar have a history of arbitrary domain suspensions?)<p>Fourthly, as mentioned in another comment, their terms of service is absurdly loose with regards to their responsibilites; they can terminate service arbitrarily, and have no obligation to transfer ownership to you in this case. This is completely unacceptable.<p>Fifthly, their website doesn&#x27;t work properly without JavaScript. This is completely unacceptable in any case, but is particularly egregious for an anonymity-focused service which provides a Tor hidden service, where many customers may wish to keep JavaScript disabled (as is Tor Browser&#x27;s default) to reduce attack surface. Apparently people don&#x27;t know how to make websites anymore.<p>Sixthly, their website copy is amateurish and has basic typographical errors.<p>Seventh, and perhaps most gravely of all, their entire website betrays a fundamental misconception of the roles and demarcation of a registrar (or pretend registrar, as is the case here.) Above I mention that they are anti-free speech, but the very fact that they think it is the place of a (pretend) registrar to have a policy on this matter betrays a fundamental misconception about the liabilities of a domain registrar. The very idea that a domain registrar (or pretend domain registrar) should be in some way responsible for content hosted &quot;on&quot; a domain is faulty, and at the same time sets a hazardous precedent; this is exactly the kind of thinking which absolutely should not be encouraged or perpetuated in the domain name industry, as it is only going to lead to more and more political intervention at the domain name level.<p>A domain name registrar nominates domain names (meaning essentially the name itself, plus the specified nameservers) to a domain name registry. The only legitimate involvement a registrar has in the use of the domain name is any issue involving the legality of the literal domain name string itself, or the nameserver names, or maybe WHOIS data. Notice that for all its faults, this actually moreorless matches the ICANN model: There are dispute processes for trademark issues regarding the domain name string itself, and dispute processes for WHOIS data. There are emphatically not ICANN dispute processes for content served by nameservers, or content served by hosts referenced by zone data served by nameservers! (I suppose theoretically someone could find a way to break a law with the nameserver names themselves; setting a nameserver for example.com to &lt;illegal-string&gt;.example.com, say, but it seems like that&#x27;s sufficiently obscure a possibility that it has not yet arisen.)<p>A domain name registrar is not responsible for the content served by name servers referenced by a domain name, let alone the content served by services provided by hosts referenced by the content of a zone file served by a name server referenced by a domain name. That this pretend registrar fundamentally fails to comprehend this demarcation of responsibility is extremely problematic, and betrays a troubling lack of understanding of the system.<p>Of course, it certainly may be the case that domain name registries and registrars (and pretend registrars) in the future get more and more dragged into disputes regarding services provided by hosts referenced by zone files served by nameservers referenced by a domain name, but this is <i>extremely</i> undesirable. It would represent the politicization of the domain name system, which would itself seriously undermine its stability and reliability. We have already seem some attempts to politicize the system and they do not bode well; it&#x27;s certainly not helpful if registrars start overestimating the degree of their responsibility, as it only increases the feasibility of future politicization of the domain name system.<p>In particular, it should be noted that there is basically no case where the seizure of a domain name for the content it &quot;hosts&quot; (in reality, references, not even directly but via a set of referenced nameservers) can be proportionate; or at least, no case where it can be reliably ascertained that the seizure of a domain would not be grossly disproportionate.<p>For example, if google.com accidentally hosts a small amount of illegal material, should google.com be suspended? Of course not; so unless one is suggesting that &#x27;important&#x27; domains should be subject to different, more preferential rules than &#x27;unimportant&#x27; domains (an affront to the idea of an internet open for all), where is one supposed to draw the line?<p>Moreover, most nameservers do not allow zone transfers. This means that the extent of a zone served by nameservers referenced by a domain name cannot be reliably ascertained, which again means that there is no way to reliably ascertain that the seizure of a domain name is not grossly disproportionate. If a domain hosts illegal.example.com, but also hosts a million legal subdomains, how can the seizure of example.com for hosting illegal.example.com be proportionate? There is no way to reliably ascertain the existence of subdomains, so illegal.example.com could be known to search engines but the million legal subdomains could be unpublished, internal names yet unknown (by obscurity) to the world. Even if the full contents of a zone could be reliably ascertained, most records reference IPs (A&#x2F;AAAA), not services (SRV, MX), so unless you portscanned every IP referenced, that doesn&#x27;t tell you what type of service is hosted on those subdomains (and even if you did portscan those IP addresses, there&#x27;s the possibility that some services are firewalled to certain source IPs, for example services for internal use only, etc. etc.; the possibilities are endless, and thus so are the opportunities for unforeseeable collateral damage).<p>There is an extremely relevant real-world example of this: the no-ip.org debacle (no-ip.org is a domain which provides free subdomains to arbitrary parties), in which a court, truly extraordinarily, allowed a private corporation, Microsoft, to assume control of the entire no-ip.org domain, simply because of a single bad user, and a very tenuous claim that the abusive subdomain involved infringement of a Microsoft trademark. This resulted in massive disruption to all other no-ip.org users. Again, there is no way of reliably ascertaining an upper bound for the operational impact caused by a domain seizure.
评论 #14178290 未加载
ijafri大约 8 年前
Their ratio is going to be 10 customers x 10 DMCA notices.
franciskim大约 8 年前
ICANN shutting this down in 3...2...1...
评论 #14178165 未加载
redxblood大约 8 年前
This is extremely expensive.
vavoida大约 8 年前
nice service, I like the idea of the automatic pgp-key-lookup-service
imjustsaying大约 8 年前
&gt;As long as you keep within the boundaries of reasonable law and you&#x27;re not a <i>right-wing extremist</i>, we’re for promoting your freedom of speech<p>What did he mean by this
lsjdfkljdfwkwdf大约 8 年前
No DNSSEC support?