Hacker News new | ask | show | jobs
by shiftpgdn 5396 days ago
I don't work for BlueHost but do run my own Hosting company. I'd like to offer you some counter points:

1. Web hosting industry is RIFE with fraud and are huge targets for hackers who want to test credit cards/spread warez/etc. They're not asking you to verify before giving you SSH, they're asking you to confirm you made a legitimate order.

2. This is unfortunately a limitation of cPanel add-on domains. If you don't want sites to "live inside eachother" but you want cPanel hosting I'd recommend getting a reseller account from somewhere or a VPS that'll give you full root.

3. This is for security as cPanel/exim (I assume they're using exim) route mail locally. This means on a cPanel based shared host I could go setup "gmail.com" as an add-on domain, setup a catchall e-mail account and then any e-mail the server is trying to send out to Gmail will get forwarded into my catch-all mailbox. This is a pretty big security hole but unfortunately it's part of most mailservers. BlueHost is making you verify ownership of the domain in order to prevent from exploiting this security flaw. Same vein as Google making you verify domain ownership.

I understand you're frustrated but I don't really feel you're giving BlueHost a fair shot. On the other hand they ARE my competition and if you want to try out another cPanel based webhost I'd be happy to set you up with a coupon for some freebies. :)

1 comments

I think you should post your company in your profile. I am looking for a webhost for a couple of wordpress blogs for some customers and I immediately checked your profile looking for the name of your company.