Hacker News new | past | comments | ask | show | jobs | submit login

This bit me kind of bad yesterday.

I was about to drive out of cell range and got a text that client's site had some strange page displaying.

Unfortunately, they repoint the dns servers of the domain, and the client had the contact email mx records associated with same domain.

The actual site gets 'dns hikacked' by icann until you fill out a captcha on your site's new page and it emails the whois email account on record with the link.

Had to log into the registrar, luckily had the client's account info, changed the email, and got it verified.

That was 3am yesterday.

Says it takes 24 to 48 hours to updated, but it was only like 8.

Still, if you had an ecommerce site or conduct time-sensitive business via email, be careful.

Because, if you do not see the email, your site will be hijacked by ICANN.




ICANN didn't 'hijack' the domain.

The domain was suspended from DNS because you hadn't paid your renewal bill. The "strange page" was put up by your registrar to notify any visitors of this and to direct them towards their billing system. The idea is to effectively shame people into paying their bills in a timely manner. Your registrar would've sent you at least three different emails before and shortly after the domain's expiration including a notice of what would happen if you didn't pay on time. If you didn't receive these, then that's on you for not keeping your contact details up to date and correct, which you're required to under your registration contract, and which is why you get those emails out periodically asking that you verify that the details they have for you are correct.

If you don't pay your phone bills, electricity bills, rent, &c. on time, you'd expect the service to be removed. Why would domain names be any different?


How do they email you if your contact email is on the domain they just suspended? Time to set a TTL of 100 years, or something, I guess.


You should never use a contact email that is on the domain for the DNS record in question. Only bad things can result. I use my most basic fastmail.fm email for that purpose.


google.com appears to use a google.com email address in its DNS record.


Google probably have a real live person they can call if this gets messed up, or even has the potential to get messed up a few months from now.


You get the emails before the DNS suspension date. Here's the policy in question: http://www.icann.org/en/resources/registrars/consensus-polic...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: