I disagree that they are incompetent. They are not. A reasonable argument may be made about their policies compared to other registries, but they have some exceptional DNS expertise on staff.

Btw. some years ago they actually checked and enforced SOA values ... such creating a clusterfuck for dyn. dns providers. Just another typical denic idiocy but it seems after a shitload of complaints,

As far as ideas go, given that you're hosting a DNS service as well, might be nice to add a "add hostname/ip as A-record" while creating a server.

I'm a nsd guy like you (with a similar story; also had to let go djb's dns). I had a quick look at gdnsd, frankly mostly because its name seemed to suggest it might be a pimped up nsd.

the user to reinstall the OS, change reverse DNS, etc from within their own isolated control panel and the addon logs into the OVH API and does this under the "real control panel" a

In my experience good, cheap Swiss LEB providers are elusive. The couple I've tried are less than ideal. One provides such a terrible service, their existence won't even be acknowledged by me. Here

And no, certs are not simply about MITM avoidance and self-signed certs can offer that, too, for instance a annotations in the domain records and via dns. Actually, letsencrypt makes MITM attacks simp

Now wait, DV stops some common low-tech attacks, like DNS spoofing at the level of a wifi router in a cafe. That's better than nothing.

(Quote)

Let's Encrypt's ISRG are not an "unknown bunch of people", you can see who's running their board of directors and what credentials they have. At DNS Eek there's no word on who's runn

You might want to change default virtual network adapter, because it somehow manages to render avahi DNS running on my private VPN completely useless.

Because that's how browsers work; yep, the browser gang decided that selfsigned certificates aren't trustworthy but displaying control over the domain DNS to a CA (manually or with a bot) using (hopef

AlterNIC project is currently defunct, but yes, it's the same kind aka Alternative DNS Root. (https://en.wikipedia.org/wiki/Alternative_DNS_root)

It checks control of the web server and/or domain DNS, so it's about like any other DV certificate. Maybe slightly better than self-signed in security terms, maybe equal, certainly not worse. Also n

Why do you say that? It's decent hardware and network speed. Dynamic DNS is no big deal.

"A payment create traces"... but that's completely out of the scope of domain validation, that is: the applicant has "some" control over the DNS domain, period. Exp

It seems you're pushing free/cheap services rather than an alternate DNS root. why not buy spiffy.ntld and just supply free subdomains like CentralNIC did.

Do you allow people to run their own DNS servers for DNSEEK extensions?

I would never use dns servers of unverified parties.

If Afternic doesn't verify the listing of the domain names in their database time to time, no problem, dnseek.com is an established site and doesn't have a landing page for Afternic, you could have se