Why do web devs like to take over DNS?

Forums › IT Pro and developers › Why do web devs like to take over DNS?

lxsw20

3500 posts

Uber Geek

Subscriber

#296263 3-Jun-2022 09:31

I've found this recently with a few clients.

Rather than just changing what ever A records they need to, they change the NS records and take over the whole zone. Which now means any DNS changes are at the mercy of the Web Developers time.

Is this just down to a lack of DNS understanding, or is there a decent reason to do this?

1 | 2

Geek @ Coastguard NZ
13652 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2922115 3-Jun-2022 09:35

Lack of understanding from the clients side of things, and its a scam by the devs to hold onto the client "oh, we need to do that, you cant do it" so clients just stay with them, they dont understand it can be moved elsewhere etc.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree - kiwiblast.co.nz - Lego and more

Support Kiwi music! The People Black Smoke Trigger Like A Storm Devilskin

NZ GEEKS Discord______________________________

Samsung

Shop now on Samsung (affiliate link).

dan

1134 posts

Uber Geek

Lifetime subscriber

#2922118 3-Jun-2022 09:41

xpd:

Lack of understanding from the clients side of things, and its a scam by the devs to hold onto the client "oh, we need to do that, you cant do it" so clients just stay with them, they dont understand it can be moved elsewhere etc.

yep. i never let them have access to the domain/dns for any client.

cyril7

9049 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2922138 3-Jun-2022 10:20

Yep, exact same issue with a client of mine recently, I enlightened the client who was already smarting at being charged extra by web dev for security patches that were infact stated as part of the monthly contract.

Not impressed

Cyril

lxsw20

3500 posts

Uber Geek

Subscriber

#2922143 3-Jun-2022 10:31

Sigh, I've just found another one this morning too flips table

michaelmurfy

meow
13163 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2922155 3-Jun-2022 10:55

I suspect it has to do with shared hosting platforms. Many (eg CPanel) expect you to change the NS over to the CPanel server so it handles everything.

The best solution is not to use shared hosting. Cloudways (https://www.cloudways.com) comes to mind as a decent host that is actually still private.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

lxsw20

3500 posts

Uber Geek

Subscriber

#2922214 3-Jun-2022 11:59

Yeah what webhost the client uses is out of scope for me. In these cases the damage is already done.

But you're put some light on why they are doing this.

danfaulknor

923 posts

Ultimate Geek

Trusted

Prodigi

#2922247 3-Jun-2022 13:55

Just to cover the other side of things...

If the client wants a wildcard LetsEncrypt cert (for example) the hosting platform needs DNS control to create the proper records for verification.

Maybe there is a server migration happening, and the IP is changing.

Maybe the person that is in control of DNS doesn't know what they're doing and/or takes weeks to implement changes requested by the web developer (and then the web developers gets blamed for site issues/downtime)

Yes, all these are from experience and we see this from both sides (IT provider and web host/developer)

they/them

Prodigi - Optimised IT Solutions
WebOps/DevOps, Managed IT, Hosting and Internet/WAN.

lxsw20

3500 posts

Uber Geek

Subscriber

#2922256 3-Jun-2022 14:06

Certs- fair enough

Server Migration - assuming they have access to change the NS records, then they could have just updated the records required.

Blame game - that can go plenty of ways.

If DNS was migrated to a platform where rights could still be delegated to those that need them, it wouldn't be an issue. IME it seems a lot of the shared web platforms have no ability to do that, or the web devs are not willing to give access.

hio77

'That VDSL Cat'
12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

Subscriber

#2922277 3-Jun-2022 14:53

Deal with a ton of server migrations for Webhosting customers; Particularly for managed customers.

The amount of pain we have as a provider doing the migrations for them when DNS isn't managed is massive. (I'm talking 1000-2000 sites across Multiple servers)

If there is an IT Company involved in looking after DNS, it's not so bad as we can tend to have an agreement between the different people involved to be fair which i think speaks a little bit more to your preference.

With our customers, we tend to expect the end customer/IT to have access to Cpanel to do their dns updates, etc.

The Blame game is never fun...

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

CYaBro

4517 posts

Uber Geek

ID Verified

Trusted

#2922279 3-Jun-2022 14:57

That's why I always insist on hosting clients' domain names, so I can control the name servers and DNS records.

If they need any changes done they contact me. :)

Opinions are my own and not the views of my employer.

BlakJak

1243 posts

Uber Geek

Trusted

#2922771 4-Jun-2022 17:52

Next question. Why do web companies insist on registering domain names on behalf of their clients and listing themselves as the registrant, instead of the customer?

And why do customers let them?

The registrant is the legal domain owner. Why would you give your brand to a company you hire to provide a service?

The answer of course, is that non-technically-literate customers don't know better. Their domain works, their website works, their care factor is low and they go on with their life.

I've done far too many table-flips on this entire scenario in my lifetime...

No signature to see here, move along...

mattwnz

19994 posts

Uber Geek

#2922777 4-Jun-2022 18:08

That shouldn't be happening these days, and registrars should be picking that up. Anyone who owns a domain should have full access to a control panel to fully manage their domain name and all contact details associated with it. IMO there needs to be more education around domains and the registrant details. Some registrars charge to change the registrant details.

BlakJak

1243 posts

Uber Geek

Trusted

#2922793 4-Jun-2022 19:51

Pray tell how would a registrar pick it up? How do they know any different, without poking explicitly at the details behind every domain registered through their service?

Registrars aren't even validating that registrants are legally identifiable, expecting them to determine if the registrar is the intended owner of the domain or not is about two steps too far to expect.

No signature to see here, move along...

mattwnz

19994 posts

Uber Geek

#2922815 4-Jun-2022 22:10

The same way they do it with Australian domains where registrants need to provide an ABN or ACN or similar. That would at least protect businesses to make sure they are registered in their name, and also protect consumers, where they will know that the domain is being run by a real company operating in Oz

insane

3200 posts

Uber Geek

ID Verified

Trusted

#2922822 4-Jun-2022 22:52

I'd never allow a web developer to take over mine, but I have seen that some DNS hosting providers have very limited record types - so that could be another driver.

It's one thing to give the option of management to a potential client, or even recommend it's managed for XYZ reason - but I'd be very disappointed if companies were taking advantage and duping a client just because it's more convenient for them.

1 | 2