this post was submitted on 14 Jul 2024
320 points (98.8% liked)

Selfhosted

40296 readers
220 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
320
PSA: GoDaddy gated their own API. DDNS users warned (loudwhisper.me)
submitted 4 months ago by loudwhisper@infosec.pub to c/selfhosted@lemmy.world
74 comments fedilink hide all child comments
 

GoDaddy really lived up to its bad reputation and recently changed their API rules. The rules are simple: either you own 10 (or 50) domains, you pay $20/month, or you don't get the API. I personally didn't get any communication, and this broke my DDNS setup. I am clearly not the only one judging from what I found online. A company this big gating an API behind such a steep price... So I will repeat what many people said before me (being right): don't. use. GoDaddy.

you are viewing a single comment's thread
view the rest of the comments
[–] catloaf@lemm.ee 6 points 4 months ago (2 children)

That can't be right. I only had two domains (one now) and I've been using the API just fine. And basically any purchase will clear those dollar amounts.

[–] loudwhisper@infosec.pub 8 points 4 months ago

I found it on their FAQ.

Yes, it is generally less restrictive, but... I have 4 domains, and now I have renewed all of them for the maximum amount. They will all expire after 2033. So unless I decide to add more domains (which is unlikely), I won't spend a cent in the next ~9 years. I wonder if they really enforce it as it is written or they consider still the renewal an expense "split" over the duration.

Still, I really don't understand. You can - and should - have proper rate limits on the API. You have API keys that uniquely identify the source, what is "the abuse" they are trying to prevent this way...?

[–] hedgehog@ttrpg.network 4 points 4 months ago (2 children)

Doesn’t their API also require you to allow-list IPs, making it basically useless for dynamic DNS?

From https://www.namecheap.com/support/api/intro/ under “Whitelisting IP.”

[–] loudwhisper@infosec.pub 2 points 4 months ago

That's a very interesting gotcha. They don't seem to support address ranges either. Unless once you add the whitelist the requests still work from any address (their documentation is ambiguous). This is even more confusing.

[–] catloaf@lemm.ee 1 points 4 months ago

Not sure. Personally I only use it for Let's Encrypt DNS challenges.