On: NPM Vulnerability Discussion on Twitter

[seanwilson]

> Buy expired NPM maintainer email domains

How do people manage selling or changing a domain they've been using long-term as their primary email address for sign-ins like this? To stop a new owner of that domain from taking over accounts sign-ins that use that email address, you'd need to reliably update all your sign-in details with anything you've signed up to?

You could use a password manager to track everything you've signed into before to help with this but that's error-prone.

Alternatively, this forces you to keep paying for the old domain indefinitely?

[moritonal → seanwilson]

Yes, that's exactly what you have to do. There's no way to raze land on the internet.

[readmorebooks → moritonal]

This also highlights how often developers seem to ignore mortality. When a person expires, soon will their domain registration follow.