Alexhost.com - Free DNS service for everyone!

sillycat

@LTniger said:

@bermudi said:
I'm still curious about the passwords tho

@bermudi said:
are passwords stored in plaintext? I created an account and got my password mailed back at me, which is bad enough already

He use Hostbill. Hostbill send email and take password in plain text before encrypting it and sending to DB. Your data is safe, Hostbill use modern day encryption.

I also use modern-day encryption!

securer

My provider and the best provider so far. I have dedi with them 1gbps unmetered badnwidth. Online for over a year and no issues so far. Keep up the good work. Greetings from katz

bermudi

@LTniger said: Hostbill send email and take password in plain text before encrypting it and sending to DB

It still is a very bad practice to send plain text password over email imo. Lots of servers log emails and sadly there are plenty of providers who fall back to unencrypted smtp

tentor

@bermudi said: Lots of servers log emails and sadly there are plenty of providers who fall back to unencrypted smtp

Generally emails are not end-to-end encrypted, thus is does not matter whether your server supports TLS or uses plaintext SMTP - the server administrator is able to see contents of the email letters stored UNLESS some end-to-end encryption applied, for example OpenPGP or S/MIME.

mwt

@tentor said:

@bermudi said: Lots of servers log emails and sadly there are plenty of providers who fall back to unencrypted smtp

Generally emails are not end-to-end encrypted, thus is does not matter whether your server supports TLS or uses plaintext SMTP - the server administrator is able to see contents of the email letters stored UNLESS some end-to-end encryption applied, for example OpenPGP or S/MIME.

Wat? That's like saying that it's fine to login to your bank over http because the bank could skim your passwords anyway. TLS protects against bad actors who are not the server you intend to communicate with.

tentor

@mwt said:
Wat? That's like saying that it's fine to login to your bank over http because the bank could skim your passwords anyway. TLS protects against bad actors who are not the server you intend to communicate with.

This is not what I said. Please read this:

@tentor said: the server administrator is able to see contents of the email letters stored UNLESS some end-to-end encryption applied, for example OpenPGP or S/MIME

TLS is not end-to-end encryption, it prevents only in-transit interception and is not sufficient to prevent leakage of confidential information from the email letter altogether.

In simple wording: if you use service like gmail (their email servers use TLS) and alexhost sends you a password from billing, then malicious admin at google is able to log in your alexhost account by using the password within letter. OpenPGP and S/MIME are preventing this.

Levi

@mwt said:
Wat? That's like saying that it's fine to login to your bank over http because the bank could skim your passwords anyway. TLS protects against bad actors who are not the server you intend to communicate with.

You don't understand how email works. TLS is for transport only. It does not encrypt data on server. Email is not secure by design and will never be.

Solutions like PGP, S/MIME are hard and not user friendly.

Want safe communication? Use encrypted p2p apps, not email.

Levi

Holy shit, there is cociu!

https://alexhost.com/about/

alexhost

@neckbreaker said:
Thank you Alexhost for providing quality services out of pretty rare location which is Moldova.
I wish the DNS was anycasted(between MD and NL), but maybe It would make sense for paid plans.

Thanks anyways, I will happily use it whenever I have a project that requires something like that.

@sillycat said: I didn't even need to provide Hetzner with this much information...

Unlike Hetzner, they are very very unlikely to verify what you type there

Hi, Nick

That requested information is default. We can't verify if is correct and if you pay anonymously.

Thanks for your feedback. You're welcome.

We will see what we can do. For now we are doing this.

sillycat

@alexhost said: That requested information is default. We can't verify if is correct and if you pay anonymously.

Thanks for explaining that! I've made an account, and now it's time to test it out.

techhelper1

@alexhost If you're so proud of this DNS platform, why are you using Cloudflare to host your site and provide proxy services?

alexhost

@techhelper1 said:
@alexhost If you're so proud of this DNS platform, why are you using Cloudflare to host your site and provide proxy services?

That's a good question.

Cloudflare provides L7 protection just only that.

The main reason why we launch this DNS service, is for who want an alternative to Cloudflare, this mean in terms of privacy. (Terms of Service and Acceptable Usage Policy applies)

But if you don't want or you don't need to use Cloudflare, you can use our DNS.
Another reason we mention is Privacy.

Best Regards,
Alexhost

quanhua92

@alexhost How many DNS servers do you have? Is it possible to set up GeoDNS? Any plan for paid plans?
Thanks

alexhost

@quanhua92 said:
@alexhost How many DNS servers do you have? Is it possible to set up GeoDNS? Any plan for paid plans?
Thanks

All questions are in the page. In near future maybe we have paid plans.

Turbo_Pascal

Can the DNS hosting include proxying of an A record? (Cloudflare does this.)

alexhost

@Turbo_Pascal said:
Can the DNS hosting include proxying of an A record? (Cloudflare does this.)

Hello,

Yes.

You can check here
https://bill.alexhost.com/knowledgebase/article/33/how-to-set-up-and-configure-dns-service/

Kindly Regards,
Alexhost

Turbo_Pascal

Thanks. However, I searched that page for the word, "proxy", and came up with nothing.