107

Is this normal for domain name registrars to do. (feddit.org)

submitted 1 week ago* (last edited 1 week ago) by dunes@feddit.org to c/privacy@lemmy.ml

37 comments fedilink hide all child comments

I have been using Porkbun for domain name registration until now, but I wanted to move to a European registrar. When I registered a domain, I received this email. Is it normal?. If not what registrar do you use? I have filled in my name and address while registering an account and have 2fa on. It's an id verifier app.

The app https://apps.apple.com/us/app/infomaniak-kcheck/id1500022928

To infomaniaks credit they gave me a refund instantly when i asked.

top 37 comments

sorted by: hot top controversial new old

[-] Stevles@lemm.ee 4 points 6 days ago

Not normal at all. Go a different (more reputable) registrar.

Cloudflare is my permanent goto.

[-] exu@feditown.com 2 points 6 days ago

It depends on the registrar. Some just assume the information you provided is valid.
Infomaniak apparently wants to verify your info, though they also offered verification through credit card when I signed up.

[-] mvirts@lemmy.world 1 points 6 days ago

Some tlds require the owner to meet some legal requirements, like affiliation with a specific country. I've registered .us domains before without requests for ID but I did pay with a US based card.

[-] dunes@feddit.org 3 points 6 days ago

It is not a country tld its .software.

[-] truthfultemporarily@feddit.org 51 points 1 week ago

No I've never seen this. Usually they send you an email to the admin address of the domain with the code.

[-] bamboo@lemmy.blahaj.zone 23 points 1 week ago

What is the TLD of the domain you're trying to move? Not all registrars support all domain names. For example .ie domains for Ireland can only be registered at very few registrars, which is a pain.

Off the top of my head, OVH might fulfill your needs, depending on the TLD.

[-] dunes@feddit.org 6 points 1 week ago

It's .software.

[-] Redjard@lemmy.dbzer0.com 6 points 1 week ago

.software seems quite expensive (and long to type).
njalla offers registering .software domains, so I would recommend them.

[-] solrize@lemmy.ml 14 points 1 week ago

I've transferred domains out of porkbun without seeing anything like that. I've had to release the domain lock and paste a transfer authorization code from one place to another. That's how it has worked at other registrars too.

[-] dunes@feddit.org 6 points 1 week ago* (last edited 1 week ago)

I bought it on the registra. What registra do you use instead of porkun?

[-] wurstgulasch3000@feddit.org 3 points 1 week ago

Hetzner is good but unfortunately they only support a handful of common TLDs

[-] solrize@lemmy.ml 2 points 1 week ago

I mostly use porkbun but also namesilo and a few others.

[-] randomwords@midwest.social 11 points 1 week ago

I use porkbun, they seem great, why are you switching? Just to have a European based registrar?

[-] dunes@feddit.org 17 points 1 week ago* (last edited 1 week ago)

I live in Europe. And the US are seaming less and less like a place where I want my data to be. I would also rather support European alternative's.

[-] randomwords@midwest.social 1 points 1 week ago

I get it. Good luck with your search!

[-] Kraiden@kbin.earth 10 points 1 week ago

Lol, what did you try to register? downwithdomainnameregistrars.com?

[-] dunes@feddit.org 14 points 1 week ago

A domain for the things i selfhost so i don't have to use duckdns.org.

[-] charisma_ken@lemmy.blahaj.zone 8 points 1 week ago

Since your goal is "to move to a European registrar" Porkbun is not for you.

https://hosting-checker.net/websites/porkbun.com "Webserver Amazon"

Here are some additional options. https://european-alternatives.eu/category/domain-name-registrar

https://1984.hosting/product/hosting/

I suggest you reach out to Infomaniak support and ask for an alternative method which is less invasive.

https://www.infomaniak.com/en/help

Try to make Infomaniak a better experience for everyone. Infomaniak claims to be "The Ethical Cloud" but they did not start business as a privacy company and have been learning over time. Help to teach them with one more customer story. Let us know what happens.

If no luck with Infomaniak helping, you can try to contact a different registrar before signing up to confirm they will accept your domain type and ask them what the process will be. Hold them accountable to whatever process they describe if you choose them.

[-] 0x0@programming.dev 5 points 1 week ago

I've been happy with joker (de).

[-] Scirocco@lemm.ee 5 points 1 week ago

Also a shoutout to joker. Been there for 20(ish?) years. Never an issue.

Old- looking UI which i actually appreciate

You can also very easily register as a reseller for less expensive renewals.

[-] colourlessidea@sopuli.xyz 3 points 1 week ago

Gandi (gandi.net) is based in France. While I’m currently not using them, I have in the past and had a positive experience.

[-] 8uurg@lemmy.world 5 points 1 week ago

As a past customer of Gandi, they have been bought out and have been significantly increasing their prices (renewal this year would have cost me twice what I paid a couple years back) while reducing the value proposition of their offering (e-mail is no longer included...)

[-] colourlessidea@sopuli.xyz 2 points 1 week ago

Ahh, that’s terrible. Thanks for the info!

[-] Dkarma@lemmy.world 2 points 1 week ago

Supremeserver22.com is a cheap UK registrar

[-] pirat@lemmy.world 4 points 6 days ago

The linked site does not have a valid SSL certificate. To me, that seems pretty sketchy for a registrar. Are you sure the URL is correct?

[+] adespoton@lemmy.ca -27 points 1 week ago* (last edited 1 week ago)

Yes, this is normal. The alternative is having your domain stolen and held ransom by someone who pretends to be you. Usually they do have an alternative method though, using some other 2fa like a yubikey.

[-] scrion@lemmy.world 22 points 1 week ago

This is absolutely not normal.

[-] RedditWanderer@lemmy.world 22 points 1 week ago* (last edited 1 week ago)

While 2FA is normal, there are multiple ways to 2FA. I've never heard of having to install their own proprietary app on a phone just to use an authenticator token.

[-] dunes@feddit.org 19 points 1 week ago* (last edited 1 week ago)

Don't think it's 2fa. Its id verification.

Screenshot of the app store screenshots.

[-] MalReynolds@slrpnk.net 13 points 1 week ago

Well, that's all kinds of wrong.

[-] TranquilTurbulence@lemmy.zip 12 points 1 week ago

This looks like a dream target for hackers. Imagine all the data you could find here. If there ever was a single point of failure, this is it.

[-] guillem@aussie.zone 4 points 1 week ago

It can be normal depending on the tld you chose. There are territorial tld's that are restricted to, eg, residents.

[-] dunes@feddit.org 4 points 1 week ago

It's not a country tld so don't think it's that.

[-] EmilieEvans@lemmy.ml 2 points 1 week ago

Not really. 2FA or other "strong" authentification for requesting the auth-code is common.

The receiving registrar doesn't care at all.

Likely the only check there is, is fraud protection and that is them protecting themself against payment frauds and not you/the domain.

[-] RedditWanderer@lemmy.world 1 points 1 week ago

There are independent apps for that where you can link all your accounts.

Others have pointed out the app is for identification which makes sense to have an app to secure the exchange, but a lot of them don't request identification in most cases.

[-] adespoton@lemmy.ca 2 points 1 week ago

Many services do that. However, very few make it the only 2fa allowed.

[-] ReversalHatchery@beehaw.org 2 points 1 week ago

for that you really dont need ID verification. that and 2FA serve entirely different purposes. ID verification is to ensure you are not hiding your identity. 2FA is to ensure that you are really the account owner.

this post was submitted on 14 Feb 2025

107 points (99.1% liked)

Privacy

34007 readers

680 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS