Is there any indication that Gandi is insecure?

mbreese · on March 9, 2023

Not that I know of, it’s just good practice to separate services like this (even if it can be more expensive and logistically difficult).

justeleblanc · on March 9, 2023

I'm asking because the GGP wrote "better more secure registrar". Since I'm using Gandi right now (and I don't care about their mailbox offer), I wanted to know if it was really insecure.

judge2020 · on March 9, 2023

GGP said hosting, but I think they mean email hosting. Even if you keep your actual registrar account @gmail or anther third-party, it's not recommended to handle your registrar, DNS, and email in the same place, since a compromise of any of them is likely to lead to compromise of the other systems (eg. an attacker gains admin permissions on the website / backend and uses it to reset your email password and download your email inbox)

Tijdreiziger · on March 9, 2023

Aren't these orthogonal concerns?

registrar or DNS gets hacked -> attacker can receive mail as you (by transferring your domain or changing your MX record)

e-mail host gets hacked -> attacker can download your inbox

both -> both

justeleblanc · on March 9, 2023

I'm sorry but I don't understand what you're saying. The sentence was literally "Transfer the domains over to a better more secure registrar." This is about domain names and registrars and it's implying that Gandi is insecure. Your point about putting your eggs in the same basket is a different point.