[ezequiel-garzon]

One aspect I found puzzling about Gandi is that until recently they published your "handle" in the WHOIS information, which in effect gave away your username. Now, some may tell me hiding that is security through obscurity or some such, but in my mind it adds another protection layer.

[heypete]

I seem to remember that being the case with Network Solutions back in the early days.

Gandi seems to hide your handle these days for certain domains if you have whois privacy enabled: my .com/.net names with Gandi don't show the handle, but my .org domains do. My .us domains (which don't allow whois privacy) also show the handle.

Then again, one can easily enable two-factor authentication and it's essentially irrelevant if the handle is known.