Post by @aral@mastodon.ar.al

Aral Balkan
@aral @mastodon.ar.al
Public en edited

So maybe launching with small-web.org and having small-tech.org is not a good idea after all…

So what are safe TLDs? Is there even such a thing? Any TLDs not controlled by the US in one form or another? Any anti-fascist TLDs?

Hey @EUCommission, maybe this is the sort of thing you should be looking into given all your “digital sovereignty”, talk, hmm? Pretty easy one to fix, this one.

Benjamin Sonntag-King @benjamin@piaille.fr

@malteengeler

The domain names of
autistici.org / inventati.org (and noblogs.org) are now suspended.
.org being managed by a US entity they were forced to suspend them due to Autisti (the oldest leftwing Italian collective doing web and mail hosting) being declared a terrorist organisation by Trump

Even for WikiLeaks they didn't do that

The US are clearly a fascist state now....

And all your links to your blogs are now dead 😭🥴

(Editing so everyone knows: maybe not. They were dead a few hours ago but not anymore)
(subedit: autistici.org still dead, the other are fine for now)

71 likes
Refresh interactions
58 boosts
Replying to @aral@mastodon.ar.al
Benjamin Sonntag-King
@benjamin @piaille.fr

@aral any ccTLD is managed by the country it's incorporated into, so .fr .eu .be etc. are "fine" (until they declare you a terro too...)

Replying to @aral@mastodon.ar.al
Matthew :bi_verify:
@matty @blahaj.zone

@aral@mastodon.ar.al At this point, I just assume majority of tech related corporation yo be fascist until proven otherwise. Maybe not the healthiest way to view it but it's getting difficult to find one who isn't in compassion.

Even then, I questioned if that is true or if they have skeleton in the closet that has to yet be exposed. I hate this timeline so much.

Replying to @matty@blahaj.zone
Aral Balkan
@aral @mastodon.ar.al

@matty 💯

Replying to @aral@mastodon.ar.al
Aral Balkan
@aral @mastodon.ar.al

@EUCommission To answer my own question, if you’re not a fascist in the EU, consider registering a TLD from a non-US registry with no ICAAN registry contact:

EU/EEA ccTLD registries (non-US operators, no ICANN registry contract):

• .de – DENIC eG, Frankfurt (cooperative)
• .nl – SIDN, Arnhem (foundation)
• .fr, .re, .yt, .pm, .tf, .wf – AFNIC, France
• .eu – EURid, Brussels
• .be – DNS Belgium
• .at – nic.at, Vienna
• .cz – CZ.NIC, Prague
• .pl – NASK, Warsaw (state research institute)
• .se, .nu – Internetstiftelsen, Sweden
• .dk – Punktum dk
• .fi – Traficom (Finnish state agency)
• .it – Registro.it / IIT-CNR, Pisa
• .es – Red.es (public body)
• .pt – DNS.PT
• .ie – IE Domain Registry
• .gr, .ελ – ICS-FORTH, Crete
• .hu – ISZT · .ro – ICI Bucharest · .bg – Register.BG · .hr – CARNET · .si – Arnes · .sk – SK-NIC (owned by UK-listed Team Internet) · .lu – Restena · .lv, .lt, .ee, .cy, .mt – national academic/foundation registries

Nearby non-EU, non-US: .is (ISNIC, Iceland)

It’s also important to use non-US payment systems like SEPA, Aero, national payment systems – iDEAL (NL), Bancontact (BE), Blik (PL), Bizum (ES), MB Way (PT), Swish (SE), MobilePay (DK/FI)) – or non-proof-of-work (because environment) cryptocurrencies.

If you have any other suggestions, etc., please reply to the thread.

Replying to @aral@mastodon.ar.al

@aral Can maybe also consider .meow when the time comes!

dotmeow.org (yes that's .org...)

Replying to @aral@mastodon.ar.al
Bruno Scheele
@brunoscheele @mastodon.social

@aral Moved my own personal domain to .nl and my business domain to .eu recently, though a Dutch registrar. Slowly moving away from US-based stuff 👍

h3artbl33d :openbsd: :antifa:
@h3artbl33d @exquisite.social

@brunoscheele @aral

It seems that you went with 'Mijn.host' - which is one of the few independent Dutch hosters. 99% of the Dutch webhosting market is owned by a couple of investor groups.

Once they acquire a hosting firm, it is quickly hollowed out. Prices are multiplied (sometimes even 5x!), customer support becomes nonexistent etc.

This page has an overview of the Dutch webhosting market. The worst one - by far - is TWS / YourOnline.

Bruno Scheele
@brunoscheele @mastodon.social

@h3artbl33d @aral Dodged a bullet there then 😅

Thanks for the website, that’ll be a good one to refer folks to.

Bruno Scheele
@brunoscheele @mastodon.social

@h3artbl33d @aral Ah, and Argeweb is on the TWS group as well. That explains the price hike I noticed on my partner’s domain, good thing we gave that one up.

h3artbl33d :openbsd: :antifa:
@h3artbl33d @exquisite.social

@brunoscheele @aral

Yeah, I think that TWS hosters now casually sell .nl domains for 25+ euro per year. Which is utter madness.

Gareth 🏴󠁧󠁢󠁷󠁬󠁳󠁿
@gareth @tenforward.social

@brunoscheele
I will point out that if your government does something catastrophically stupid like leaving the EU, that will get taken away from you.

Yes, I'm still bitter.

@aral

Replying to @aral@mastodon.ar.al
S
@seq @infosec.exchange

@aral Thank you! I have some work cut out for me this weekend, getting some new domains. Avoiding US payment systems is still basically impossible though... :/

Replying to @aral@mastodon.ar.al
thinkbeforecoding
@thinkb4coding @mastodon.social

@aral @EUCommission almost all my domains are .fr now. They are far cheaper that .com etc...

Replying to @aral@mastodon.ar.al
AnneH
@annehargreaves @ioc.exchange

@aral @EUCommission Thanks for this aral.

Replying to @aral@mastodon.ar.al
zbrando
@zbrando @vivaldi.net

@aral One year ago I switched from .org to .eu and from WordPress to Bludit specifically to avoid this kind of situation. You can't trust the USA anymore. 😑

Replying to @aral@mastodon.ar.al
Richard
@rigrig @tubul.net

@aral Thanks for bringing this up, reminded me¹ to start moving my stuff to a .nl domain. (Moving everything is going to take forever though, soooo many places where I’m @tubul.net 😞)

¹. Well, your toot, and I finally came up with a domain name I’m happy with.

Replying to @aral@mastodon.ar.al
David Culley
@davidculley @hachyderm.io

@aral As a German, I advise against registering a .de domain.

If you pay for 10 years in advance, and then migrate to another TLD after, say, 3 years, then you'll lose the remaining 7 years. The .de TLD does not allow you to take remaining time with you. The .de TLD does all sorts of weird shit like this.

Apparently the .nl TLD does the same, according to Porkbun.

porkbun.com/transfer

> These TLD's Make No Sense
> [These] country codes are straight up weird and will delete any amount of registration term over one year. These TLDs only carry over a maximum of one years' worth of registration: .nl, .de.

When you try to register a .de domain with Porkbun, they show you this warning:

> When a domain with this TLD transfers, any registration period more than a year does not carry over. This means that no matter how many years or months you have left on the current registration, the domain's expiration date will be a maximum of one year from the date of transfer. If you think this is absolutely bonkers, you are correct and we agree.

Kévin ⏚
@kc @social.coop

@davidculley @aral if I'm not mistaken, most of the EU registrar policies are harmonised to allow EU residents to register (I can register a .it, .pt, .es, etc) so you don't need to switch when you leave.

The reason why you can't take the time with you though is basically capitalism but also separate entities, you pay to rent the specific name, etc etc

Replying to @kc@social.coop
Kévin ⏚
@kc @social.coop

@davidculley I just saw the update, yeah denic is nonsensical if that's their policy

Eric Eggert
@yatil @yatil.social

@davidculley @aral You pay to reserve a specific domain not generally a domain in that TLD space. If you decide to not use that domain anymore, that is your decision. If you reserve 10 seats in a cinema for a specific movie, you don’t get to come with 3 people and then after the fact demand to have 7 seats in other movies.

(That we rent domains instead of buying them is something that is worrysome in any case.)

Replying to @yatil@yatil.social
David Culley
@davidculley @hachyderm.io

@yatil I disagree.

If I pay to get the key and thus access to a certain house, and then never visit that house while having the key, then that is on me.

If I pay to get the key, and then return the key and thus cannot even access the house anymore, then I shouldn't have to pay for access to the house (which I don't have anymore).

Besides, all registrars other than those handling the .de and .nl are doing it in the second way. Therefore it's a business decision and not a technical limitation to do it in the first way.

Replying to @aral@mastodon.ar.al
Tizian 「ティツィアーン」
@raisondetredev @mastodon.de

@aral @EUCommission I noticed .ch and .li missing while Iceland is listed. Are they using U.S.-registrars?

Replying to @aral@mastodon.ar.al
Unlisted en edited

@aral ccTLDs are definitely more resilient to pressure from ICANN than gTLDs and sponsored TLDs.

They might have their own issues, obviously. As always, it depends on your threat model.

@EUCommission

Replying to @rysiek@mstdn.social
Hierarchy
@Hierarchy @mastodon.social

@rysiek @aral @EUCommission what kind of pressure

Replying to @rysiek@mstdn.social
Nemo_bis 🌈
@nemobis @mamot.fr

@rysiek For example #EURid governance is nice on paper eurid.eu/it/articles-associati but it's worth little if some bureaucrat at the European Commission decides to give the registry to someone else. Speaking of, I forgot whatever happened to the cancelled 2020 selection of an EU registry digital-strategy.ec.europa.eu/ which had been announced with much fanfare. theregister.com/on-prem/2020/1

Replying to @aral@mastodon.ar.al
Kévin ⏚
@kc @social.coop

@aral .eco is a gTLD that is run by a Canadian company and the registry is operated from CIRA's registry solution : cira.ca/en/registry/cira-regis

There are a handful of others that operate on CIRA's platform too.

The more stable choice in general would be a ccTLD depending on your country and local laws or Iceland since their publishing laws are very solid

Replying to @kc@social.coop
Dec [{(:no_ai:)}]
@dec23k @mastodon.ie

@kc @aral
One of the others is .ie.

When it moved to the CIRA platform, the IEDR (which had already changed back-end platform at least once before) kept its unique custom API for .ie registrar automation, instead of moving to a more widely supported open API.

As .ie is limited to registrants who can prove their connection to Ireland, many of the international registrars don't offer .ie as an option. It requires their systems to track changes to IEDR's API, and that adds extra work or cost.

Replying to @aral@mastodon.ar.al
lj·rk
@ljrk @todon.eu
Public en edited

@aral @EUCommission I'm yet to see evidence that ICANN or the PIR/.org was involved. I'm of the impression that their registrar (Gandi) stepped which is also what would make sense since they're the easiest to pressure and with the clearest legal case. Registries and ICANN don't have a contract with I/A plus ICANN/PIR are mamaged by international law rather than US. The registrar has direct business relationships (thus falling under sanctions) and can be pressured by US law directly.

I'd be surprised if ICANN was involved. Further, all domains end up being tied to ICANN in some way. I'm not sure whether this is key to what happened here.

UPDATE: Seems like now the registry (PIR) got involved as the block has been extended to include almost all their domains, irrespective of the registrar used (at first only domains of a certain registrar stopped working). Maybe the registrar fought back and it traveled up. No visible ICANN involvement yet.

Replying to @aral@mastodon.ar.al

@aral@mastodon.ar.al
What do you recommend, if one owns a .info-domain?

It's with my family name, however if one knows that and does a web search with it, my fediverse name can also be found.

Replying to @fasnix
Aral Balkan
@aral @mastodon.ar.al

@fasnix .info is owned by Identity Digital, Inc.

Wikipedia has the tea: en.wikipedia.org/wiki/Identity

I’d say at least get another domain as a backup and have a contingency plan.

Replying to @aral@mastodon.ar.al

@aral@mastodon.ar.al
Thanks!
I own several .eu-domains, however, my < name >.info is my main domain, which I use solely for official mail communication.

Would you advice in turning it to one .eu-domain instead?

Replying to @aral@mastodon.ar.al
samir, fake programmer
@samir @functional.computer

@aral @fasnix Yeah, I had fun with my domains but I think I better get a .ch soon as a backup.

Replying to @aral@mastodon.ar.al

@aral @EUCommission PunktumDK requires buying through a reseller now (recent policy change) and I dont know any resellers who dont also sell ICANN TLD-based domains

Replying to @aral@mastodon.ar.al
hallunke23 🇺🇦:nona:
@hallunke23 @troet.cafe
Public en edited

Right, except that .eu seems to have changed to contract-based.

A full list of ccTLDs with registry contract can be found here:

www.icann.org/resources/pages/cctlds/cctlds-en

@aral @EUCommission

Aral Balkan
@aral @mastodon.ar.al
Replying to @aral@mastodon.ar.al
Aral Balkan
@aral @mastodon.ar.al
Public en edited

@EUCommission Also, some of you were scratching your heads when I mentioned last year that the Small Web will be using web numbers, not domain names.

Maybe it makes a bit more sense now?

ar.al/2025/06/25/web-numbers/

PS. If you’re a developer, you can host your web site at a web number (instead of a domain name) today using Auto Encrypt:

codeberg.org/small-tech/auto-e

PPS. This work is funded by €408/month in donations (no that’s not our only source of income otherwise we would be homeless) but yes, I work full time on this. If you want to see us continue to exist against all odds, here’s the link:

small-tech.org/fund-us/

#WebNumbers #SmallWeb #SmallTech #antifascism #decentralisation #TLDs #ICAAN #centralisation #USA #fascism #tech

Replying to @aral@mastodon.ar.al
Aqua Maureen
@mooooooo @qaf.men

@aral @EUCommission baby this is ~~keke palmer~~ an IP address (it's great I love it thank you :ablobcatheartsqueeze: )

Replying to @mooooooo@qaf.men
Aral Balkan
@aral @mastodon.ar.al

@mooooooo @EUCommission Yep. About 90% of the challenge is making this stuff usable by everyday people who use technology as an everyday thing. And a huge part of that is trying to make it approachable. Otherwise, all these problems are solved and we can just point people to a few repos on sourcehut and tell them to fire up git and build it all from source. I personally know the three people who do that and they seem quite content :)

Replying to @aral@mastodon.ar.al
Aral Balkan
@aral @mastodon.ar.al
Public en edited

@EUCommission On the same note, have any of you tried Stancer for online payments? Would you recommend them (or other EU-based providers with EU infrastructure?)

european-alternatives.eu/produ
stancer.com/fra/en/online-paym

Because I’m thinking it’s probably best to get off of Stripe too.

Replying to @aral@mastodon.ar.al
Tacháaan!
@tachan @mastodon.social

@aral
Do you really expect that
@EUCommission is going to answer or even read posts at all?
I would put some hope on Europe if they interact, but I've never seen anything from them but their own posts and no interaction whatsoever.

Aral Balkan
@aral @mastodon.ar.al
Stick person poking the EU flag as used in the EU commission logo.
Replying to @aral@mastodon.ar.al
David Culley
@davidculley @hachyderm.io

@aral Never heard of it. 🙁

Replying to @aral@mastodon.ar.al
iwein
@iwein @mas.to

@aral
I know everyone hates crypto now, but decentralized payments still make more sense to me than EU controlled ones at this point.

@EUCommission

Replying to @iwein@mas.to
Aral Balkan
@aral @mastodon.ar.al

@iwein @EUCommission Yeah, I have zero issues with non-proof-of-work cryptocurrency in theory (and many with the folks who are usually involved in these things and their companies) but the real challenge there is, again, usubility. You’re up against “press this button and we’re done” (Apple Pay, etc.) or, at worst, enter three numbers and press a button (credit card checkout, when done right).

That’s very hard to compete with using:

1. Find out how all this works
2. Get a wallet
3. Find an exchange
4. Fund your wallet (guess how – that easy system that works as described above)
5. Pay using your wallet
6. What? You sent someone your private key by mistake?… Oops!

I mean you have to either be really dedicated or entirely out of options to be using crypto right now (right libertarian get-rich-quick artists, aside.)

But yes, in theory… :)

Replying to @aral@mastodon.ar.al
iwein
@iwein @mas.to

@aral "in theory", yes well put... In theory the UX and scams could be solved by a government without turning it into a centralized currency with extra steps 🤣

@EUCommission

Replying to @iwein@mas.to
Aral Balkan
@aral @mastodon.ar.al

@iwein @EUCommission Aren’t theories just peachy? :)

Replying to @aral@mastodon.ar.al
Simon Brooke
@simon_brooke @mastodon.scot
Public en edited

@aral @iwein @EUCommission

Don't be so negative, Aral. Criminals, arms traders and corrupt politicians find cryptocurrencies extremely useful.

#Crypto

louayaziz
@louayaziz @mastodon.social

@simon_brooke

Hello my friend, I apologize, but why are you ignoring me?

Replying to @aral@mastodon.ar.al
Izzy
@IzzyOnDroid @floss.social

@aral I wish @Liberapay would finally offer something privacy-friendly, non-US (they currently only support Thiel & Thiel, err, PayPal & Stripe) 😢 @EUCommission

Replying to @aral@mastodon.ar.al
estibensito_
@estibensito_ @mastodon.social

@aral @EUCommission
My favourite website, European alternatives!!!!

Replying to @aral@mastodon.ar.al
David Culley
@davidculley @hachyderm.io
Public en edited

@aral @EUCommission Yepp, Stripe is full-on with the fascism. Its CEO Patrick Collison just joined forces with 9 other tech CEOs or fascists to fund the foundation Omacom by DHH, a well-known white supremacist calling for ethnic cleansing in Europe.

The goal of that "foundation" is to fund the work of other well-known fascists in the tech space, such as the developer of the window manager Hyprland.

Stripe cannot be trusted.

- omarchy.org/news/2026/08/omaco
- omarchy.org/patrons/

Aral Balkan
@aral @mastodon.ar.al
Replying to @aral@mastodon.ar.al
David Culley
@davidculley @hachyderm.io

@aral A few shops where I buy use Mollie for payment processing. No negative experiences, does what a payment processor is supposed to do.

Aral Balkan
@aral @mastodon.ar.al

@davidculley Thanks, that’s good to know :)

Replying to @aral@mastodon.ar.al
AnneH
@annehargreaves @ioc.exchange

@aral @EUCommission Yay - back to the future!

Replying to @aral@mastodon.ar.al
Cesar
@cesarb @mastodon.social

@aral @EUCommission The safest TLD is nearly always going to be the ccTLD from your own country of residence. For instance, as a Brazilian I can use a .net.br or .com.br domain (.org.br is restricted to registered non-profits), pay with Boleto Bancário (a traditional local payment method) or PIX (the very popular new local instant payment method), and only be subject to Brazilian laws and courts (which I already am subject to, since I live here).

Aral Balkan
@aral @mastodon.ar.al

@cesarb @EUCommission I’m not too sure about that: when the US says “jump”, Ireland asks “how high and would you like a blowjob with that, sir?”

Replying to @aral@mastodon.ar.al
Richard
@rigrig @tubul.net

@aral @cesarb @EUCommission If your own country is coming after you, you’ve got bigger problems than a domain name.

Replying to @rigrig@tubul.net
Aral Balkan
@aral @mastodon.ar.al

@rigrig @cesarb @EUCommission I mean, if the US is coming after you… (which is where all this began).

Replying to @aral@mastodon.ar.al
Alex R
@alex @tech.lgbt

@aral @cesarb I suppose the argument is that Ireland can send the gardaí round to persuade you to transfer a domain regardless of where it's registered, so a ccTLD at least doesn't add another national government to the mix

Replying to @aral@mastodon.ar.al
Cairo Braga
@cairobraga @gts.cairobraga.com

@aral @cesarb @EUCommission same for Portugal, where I live now.

Replying to @aral@mastodon.ar.al
AnneH
@annehargreaves @ioc.exchange

@aral @EUCommission Oh shit. We need full spectrum of European alternatives asap.

Replying to @aral@mastodon.ar.al
Aral Balkan
@aral @mastodon.ar.al
Public en edited

@EUCommission Right, well, I’ve registered small-web.eu and small-tech.eu as backups for now.

Thankfully, with what I’ve built this year, the Small Web doesn’t need TLDs to work (see ar.al/2025/06/25/web-numbers/) but still, here’s hoping it doesn’t come to that because it will be a right hassle to move stuff over.

Buy, hey, better safe than sorry.

And I’m definitely reconsidering my choices when it comes to payment services/merchant of record for Catalyst (the free/open Small Web hosting app I’m building).

#US #fascism #ICAAN #TLDs #internet #web #BigTech #BigWeb #EU #SmallWeb #SmallTech #webNumbers

Replying to @aral@mastodon.ar.al
atom
@470m @mstdn.social

@aral @EUCommission Never thought we'd be going back to the pre-DNS /etc/hosts days, but I'm here for it!

Replying to @470m@mstdn.social
Aral Balkan
@aral @mastodon.ar.al
Unlisted en edited

@470m @EUCommission If we can achieve the usability of a phone book, I think we’ll be fine. No one remembers phone numbers these days because we don’t have to (and none of us use the Yellow Pages either) :)

Replying to @aral@mastodon.ar.al
Benjamin
@BenjaminNelan @mastodon.social
Public en edited

@aral @EUCommission

Are we going to need to bring back the phone number jingle but for IP addresses?

🎶 One Three Five! One Eight One!
Four-Four dot Fifty! 🎶

Replying to @aral@mastodon.ar.al
Raul Matias
@raulmatias @mstdn.social

@aral @EUCommission > So what are safe TLDs?

.st and .is are pretty much bulletproof.

Raul Matias
@raulmatias @mstdn.social

@aral @EUCommission Having a .onion mirror of your website is a much more durable approach, though. I'm surprised by how A/I didn't have one already. It will also help discoverability of your new domains in cases of blocks/takedowns.

Replying to @aral@mastodon.ar.al
Nemo_bis 🌈
@nemobis @mamot.fr

@aral "Pretty easy one to fix"

Only if the service is provided without payment (or on the basis of barter). The blocking statute didn't work too well so far for Iran.
finance.ec.europa.eu/eu-and-wo

Replying to @aral@mastodon.ar.al
Carlos Solís
@csolisr @hub.azkware.net
I should probably bite the bullet and get a .CR backup domain
Replying to @aral@mastodon.ar.al
Diane
@alienghic @timeloop.cafe

@aral

The Onion-Location header used to advertise a hidden service name might help provide backup access?

community.torproject.org/onion

Replying to @aral@mastodon.ar.al
rakoo
@rakoo @blah.rako.space
@aral
There might also be a need to get away from Let's Encrypt, unfotunately I only see a single european alternative on https://european-alternatives.eu/category/acme-ssl-certificate-providers (Actalis SSL)
Aral Balkan
@aral @mastodon.ar.al

@rakoo Yeah, I’ve been harping on about how we need a not-for-profit ACME service provider in the EU. It should be independent and funded with our EU taxes.

CC @EUCommission (I won’t hold my breath.)

Replying to @aral@mastodon.ar.al
Giulio Cesare Solaroli
@gcsolaroli @clipperz.is

@aral @EUCommission @alberto_cottica
Back in 2013 we had a major issue (clipperz.is/blog/2013/12/28/le) and moved our DNS to Island.
We initially tried to move also the applications there, but the available providers were sub-par.
We have been happy with that choice ever since.
Even with the current anti-EU feeling running around , Island seems still a safe bet with regard to freedom of expression.

Aral Balkan
@aral @mastodon.ar.al

@gcsolaroli @EUCommission @alberto_cottica Thank you for sharing your experience Guilio and sorry you had to go through that. Sounds like a nightmare.

Replying to @aral@mastodon.ar.al
Giulio Cesare Solaroli
@gcsolaroli @clipperz.is
Public en edited

@aral @EUCommission @alberto_cottica
The weirdest part is that we still don’t have any clue on what actually happened.
We have fantasized a lot, but with no actual evidence of any sort.
My business partner was also unusually questioned when entering the US in Miami a few years after the initial incident.
Nowadays it’s kind of sorted out, so we don’t think to it much, other than when others feel the same pain.