GoDaddy gave a domain to a stranger without any documentation
GoDaddy’s reputation and why it’s still widely used
- Many commenters describe GoDaddy as one of the worst registrars: long history of technical screwups, dark patterns, predatory expiry/auction behavior, and controversial marketing and policy stances.
- Others note it remains the largest registrar, heavily advertising to non‑technical buyers; for many small businesses it’s the first (or only) name they recognize.
- Some enterprises also use it, partly for 24/7 phone support and managed hosting, and because migrating away later feels risky or costly.
- Several people say the company has been notoriously bad for decades and are baffled that anyone still signs up.
Assessment of this specific incident
- Most see the wrongful domain transfer without documentation as gross negligence, not a rare fluke.
- Likely cause discussed: internal employee error misreading a similar domain in a support email, then processes and support that failed to detect or promptly correct it.
- Particularly criticized: support slow‑rolling, denying responsibility, or falsely claiming correct documentation existed.
Security, risk, and business impact
- Commenters stress how critical domains are: loss affects email, login/2FA flows, banking, SaaS accounts, SEO, and brand trust.
- Registrar support is called out as a major attack surface: social engineering and lax procedures can bypass technical controls like MFA.
- Using email or SMS as primary 2FA is seen as fragile because users don’t truly control phone numbers or domains.
Alternatives and domain-management best practices
- Frequently recommended registrars: Porkbun, Dynadot, Namecheap, Gandi, Name.com, Dnsimple; for enterprises: MarkMonitor, CSC, or cloud vendors (AWS Route53, Cloudflare) with paid support.
- Each alternative has some criticism (e.g., support quality, pricing changes, policy choices, or engineering mistakes).
- Strong advice to separate roles: keep registrar, DNS, hosting, and email with different providers to reduce lock‑in and blast radius.
- Use registry lock and strong internal processes for high‑value domains; avoid registrar‑provided DNS when possible.
Legal and regulatory recourse
- Some urge arbitration or lawsuits for damages; others (including lawyers) doubt it’s worth the cost given arbitration clauses and limited provable loss.
- ICANN complaints are mentioned but seen as slow and more about ownership disputes than registrar malpractice.
- Ideas raised: stronger regulation of registrars, “infrastructure building codes,” and public complaint databases to pressure providers.
Broader systemic points
- Domain pricing leaves almost no margin, so support becomes a cost center and gets minimized, especially at scale.
- Centralized DNS/registrar dependence undermines “decentralization” of services like email or federated apps.
- A recurring theme: “friends don’t let friends use GoDaddy,” and many readers report migrating all remaining domains away.