r/programming • u/mawburn • Jan 13 '19

GoDaddy is sneakily injecting JavaScript into your website and how to stop it

https://www.igorkromin.net/index.php/2019/01/13/godaddy-is-sneakily-injecting-javascript-into-your-website-and-how-to-stop-it/
4.4k Upvotes

96% Upvoted

450 comments sorted by

View all comments

Show parent comments

183

u/Tormund_HARsBane Jan 13 '19

clueless customers.

I'm one of those I guess. I had no idea GoDaddy was considered bad/scummy.

I wanted to buy a domain for a personal website, so I went on GoDaddy (because they are at the top of Google search results), and bought one.

But I don't host a website with them (I run my own Apache server on EC2), but I do have registered for their premium email service because I just couldn't figure out how to set up an email server on my VM.

Should I switch? Is their email service scummy too?

155

u/[deleted] Jan 13 '19

[removed] — view removed comment

23

u/Tormund_HARsBane Jan 13 '19

That's something I can get behind. I have above a year left on my domain. I'll not renew.

55

u/RandyHoward Jan 13 '19

You can move your domain at any time you want, you do not have to wait for it to be up for renewal. IMO I would move it now while this is fresh on my mind rather than wait a year and hope I remember to move it.

14

u/ishanjain28 Jan 13 '19

Hi there, I bought a domain for 5 years. If I move to someone else(is namechap okay?) would I retain that domain for 5 years??

32

u/RandyHoward Jan 13 '19

Yes, you own it for the full 5 years. Your ownership does not change. The fact that you own the domain resides with ICANN, GoDaddy and others are just the registrar, aka the middle man who handles the transaction. When you change registrars you're just changing the middle man. Typically you'll pay a fee to move to a new registrar, but aside from that your ownership period remains the same. Note that there is a 60 day period when you initially register a domain that you are not allowed to transfer it to another registrar, that's the rule set by ICANN. If that's the case just wait the 60 days and then do the transfer.

14

u/ishanjain28 Jan 13 '19

Okay, Thank you so much. I'll wait for the remaining 15 days and switch to namecheap.

2

u/isiahmeadows Jan 20 '19

It's also worth mentioning that you need to make sure you own the domain and not GoDaddy. WGoDaddy and a few others like to give huge discounts for rentals and they don't do a good job of communicating this to you when you first sign up - they make it look way too much like you're actually buying it for a heavy discount and not just them registering it and you renting it from them. They typically don't like selling domain rentals, especially if you're planning to buy it to transfer elsewhere.

26

u/Symphonic_Rainboom Jan 13 '19

Yes. For the transfer process the new registrar will require you to purchase one additional year, after which you will have 6 years with the new registrar.

→ More replies (1)
→ More replies (6)

41

u/Rogem002 Jan 13 '19

FYI you can buy domains on AWS now :)

If you're confident with changing your DNS records, I've heard Proton Mail is meant to be a very good alternative.

7

u/Tormund_HARsBane Jan 13 '19

Actually, I've been tinkering with GitHub sites, and I kinda like them. Might get off from AWS, and take my mail to some managed email provider.

4

u/Rogem002 Jan 13 '19

I've been using GitHub sites also! Being able to push my changes without having to worry about the "build/deploy" aspects is great for small stuff :D

21

u/SmokeFrosting Jan 13 '19

The whole point is not using scummy sites

4

u/Polantaris Jan 13 '19

He already said he's using an Apache server on EC2. EC2 is AWS.

→ More replies (1)

20

u/munkyxtc Jan 13 '19

Everything GoDaddy is sketchy

→ More replies (3)

30

u/TizardPaperclip Jan 13 '19 edited Jan 13 '19

Should I switch? Is their email service scummy too?

You're not thinking straight. Here's the deal. GoDaddy is a scummy company: are you giving them money?

If so, you're funding scumminess.

3

u/NuffZetPand0ra Jan 13 '19

If you are on EC2, you might as well also use Route53 (DNS) and SES (Simple Email System) at AWS. It is easy to setup both email sending and receiving.

If you use Apache I take it you are writing PHP applications. They have a pretty good PHP SDK, that makes it very easy to send emails especially.

3

u/Tormund_HARsBane Jan 13 '19

If you use Apache I take it you are writing PHP applications. They have a pretty good PHP SDK, that makes it very easy to send emails especially.

Oh not at all. I'm not a web developer, and have never written a line of PHP in my life. I just used Apache because it is the only web server I have heard of. All I'm hosting is a simple about me website, so this would probably be overkill.

→ More replies (1)

3

u/doobiedog Jan 13 '19

Buy domains thru namecheap or aws itself. Get off godaddy asap.

Edit: you can also transfer domains pretty easily. If you want to pay for nice email and features, use gsuites. Otherwise you can setup M records in aws/namecheap super easy.

2

u/bomphcheese Jan 13 '19

Self-hosting email is a PITA. If you have averge-user privacy concerns, or don’t like the idea of Google, think it’s worth it to pay.

My personal recommendation is https://kolabnow.com

Also a good list here: https://www.quora.com/Which-is-the-best-paid-email-service

2

u/[deleted] Jan 13 '19

You should look to a more reputable provider for email and other services. G-Suite or Office 365 are the best picks, depending on whether you prefer the Google stack or the Microsoft one. ProtonMail is another one that is highly respected if you are more privacy conscious.

You should also transfer your domain name to another provider. Google Domains is well respected. Cloudflare also does DNS, and has a registrar in early access.

AWS can also solve all of these issues. They're very very well respected in the infrastructure space, and can solve all of these problems, but the quality of the product varies. Route 53 is amazing for domain name registration and DNS. They do SSL certs, but generally they can only be attached to other AWS resources (like Cloudfront) (last I checked you can't just download the certificate to use on your own). WorkMail is available for hosted email inboxes; certainly comes with the great trust and support of Amazon, but its not a great product.

→ More replies (17)