Tim W RESISTS
In the spirit of a recent post on making the #Fediverse a more welcoming place, renewing a post I had on my old profile but apparently not here: ask me anything! I can't guarantee I'll have all the answers or be fast to reply but lll try to at least say something. Some things I can talk vaguely usefully about include:
#DNS #Google #InfoSec #SRE #SysAdmin #Internet #Unions #Organizing #Baseball #Web #Tor #Privacy and probably a billion more.
Tim W RESISTS
Obligatory usual disclaimer: all answers will be my own opinions / experiences and not those of my current or former employers, or anyone else.
Tim W RESISTS
Also if you choose to use me as a dunking ground on Google - that's certainly your right, but I also reserve my right to ignore, mute, or block you. I know people have strong opinions on Google and that's okay. I'm even okay with tough questions (though I'll note in advance that confidentiality can make good answers difficult and Google is also huge) and questions that cast Google in a bad light. But don't be a jerk, or I'll ignore you.
Martijn 🇪🇺🇳🇱
@tim Here's a random person asking a fairly random question! 😋
I have a small non-profit that is looking at potentially offering DNS registrar services (i.e. become a registrar).
Any advice on how to tackle that? What kinda software to use for the actual DNS services and what to use to allow users to self-manage their domains?
Tim W RESISTS
@chaosmonkey good question! I don't know the current exact players and state of the field there, but my advice would be to look into someone who does white-label domain resale, and/or a registrar with a solid API.
Actually becoming a full accredited registrar is a very involved process, and while services to white-label that for you also exist, it's probably cost-prohibitive for a small non-profit.
Tucows used to be the best game in town (for both of these, at least for quality).
1/n
Tim W RESISTS
@chaosmonkey In a side project I was playing with a while back I used Namecheap, who had a decent API, and I had good experiences with them. I'm currently doing my registrations with Porkbun and they seem well-regarded and their prices are good, not sure how their API / white-label options look.
DNS then is a separate discussion; so many registrars now include it with registration, if they have a quality offering and quality API, that might be good enough.
2/n
Tim W RESISTS
@chaosmonkey To some extent it depends on how much work you want to do, and how much flexibility you want to provide. I'm not familiar with existing run-your-own DNS UIs, though I am sure they exist.
If you just want something simple and you have the technical expertise you can potentially build it into your own web site or app, and either use a third party DNS provider's API or talk to your own DNS server(s) on the back-end.
3/n
Tim W RESISTS
@gregr good question! I honestly have no idea, I don't actually do anything relating to DNS at Google.
I could guess but they'd really only be guesses. Random internet speculation suggests worry of DNS amplification attacks; I know Google definitely deals with a lot of DoS/DDoS abuse so that rings plausible, but I really have no inside knowledge on that.
1/2
gregR ☯
@tim hi, on #Google subject :
Do you know why google.com zone isn't #DNSSEC signed ?
Not a criticism, there may be A LOT of good reasons
#DNS
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.