Rent it, like everyone.
This is the stack almost every site on the internet is built on. It is mature, it is inexpensive, and it is very good at its job. It is also five separate companies, each of whom can independently decide your project is over — and every one of them keeps a record that reaches back to you.
The identity bind, and its limits. The default path binds a domain to a verified
legal identity: ICANN's registrar accreditation agreement obliges registrars to hold
accurate registrant data, WHOIS/RDAP publishes some of it, and the card or bank transfer
ties the record together. Privacy-forward registrars like Njalla or MyNymBox exist —
they take Monero, do not require a legal name, and behave well. If you also connect over
Tor or a paid VPN and do not volunteer personal details, the real-world privacy you get
from them is genuinely good.
But the mechanism is different. Those providers hold an identity, or a payment, or a network address on your behalf, and can be compelled to produce what they have. Anyone who paid with a bank card, or opened an account with an email that reaches back to them, has not really used the privacy path at all — they have used a privacy brand attached to the ordinary rails. The conventional stack is anonymous only by exception, and the exception is compellable. Sirius.x is anonymous by default — the identity, the payment record, and the account were never collected, because the stack cannot collect them.
But the mechanism is different. Those providers hold an identity, or a payment, or a network address on your behalf, and can be compelled to produce what they have. Anyone who paid with a bank card, or opened an account with an email that reaches back to them, has not really used the privacy path at all — they have used a privacy brand attached to the ordinary rails. The conventional stack is anonymous only by exception, and the exception is compellable. Sirius.x is anonymous by default — the identity, the payment record, and the account were never collected, because the stack cannot collect them.
Who holds what
Registrar GoDaddy, Namecheap, Cloudflare
Leases you the name, yearly. Can suspend or transfer it on a
court order, a UDRP ruling, or its own policy — and must, by contract with the
registry.
Host AWS, Hetzner, DigitalOcean
Runs the machine. Can terminate under acceptable-use terms,
usually with notice, sometimes without.
CDN / proxy Cloudflare, Fastly
Sits in front of your traffic. Can stop carrying it — and has,
publicly, for customers who broke no law.
Certificate authority Let's Encrypt, DigiCert
Vouches that you are you. Can revoke, at which point browsers
refuse the connection regardless of who is right.
App store / payments Apple, Google, Stripe
If money or an app is involved, two more parties with terms and a
right to decline.
What it costs
| Item | Typical | Note |
|---|---|---|
| .com, first year | $1–12 | usually a promotional rate |
| .com, renewal | $12–20/yr | the real price; wholesale is ~$9.59 |
| Small VPS | $4–8/mo | plus your time |
| TLS certificate | $0 | Let's Encrypt, genuinely free |
| Renewal | every year | keeps the namespace alive; abandon a name and it returns to the pool. Fair enough. |
To be fair to it. This stack is fast, well documented, supported at 3am, and
integrates with everything. The vetoes above also remove phishing sites, malware hosts
and worse — they exist for reasons, and most of the time they are used reasonably. If
you are shipping a normal business, this is the sensible default and it is not close.
The alternative gives up the support desk along with the gatekeeper.
Sirius.x removes two of these surfaces — the one that decides whether the name is still yours, and the one that could ever be asked what you paid or who you are. Not held on your behalf; not held at all. The rest of your choices stay open. Same day, few cents, no account, no card.
See what a name costs there →
← Back to the choice · silentmode.st
Company names are examples of each layer, not endorsements or accusations.