It's very simple: Is a blind system. No authorization is actually made or needed to run it. The system is there only to detect when an installation is legitimate or not and the only way to fool it is by using a valid license among several people. We won't make a big deal if that happens unless we detect a re-selling pattern or we notice abuse.
如果你们要保障正版用户和自身的利益,建议程序增加域名授权机制。
虽然泄露源码的可能性很小,但最好别 ...
We used to have a domain tool and clients just didn't used it. It was pointless to keep using that system because it never worked as intended. It happens all the time, a plan looks superb until you start actually doing it.
We now do a more automated system for that, we get pinged on every new Chevereto intallation and besides that we do the usual guerrilla discovery of Chevereto based websites. It has worked very well indeed.
While a client may lose $68 / $98, at our side we stop earning up to 100X that money. Every single leak means sustancial less income for us, thus, less development. Even today we still find brand new websites running very old Chevereto versions (like v3.6.0) that were obtained via fraudulent activity.
There are no insurances or anything like that and when stuff like this happens we lose serious money. If somehow a license (or files) gets to a third party is because the client didn't take precaution with those.
We can't assume if an act like this is either a felony or just a mistake and that's why the only thing that we can do is to cancel the license because something like this means a very significative lost of income for us. In theory we could demand you to pay for the looses or damages that such action caused to us (it is stated in our terms) but we never do that and most likely we never will.