Hello Anand

easyDNS supports this - as you noted, this is a /registry/ product and distinct from "transfer locks" which are implemented at the registrar level.

https://kb.easydns.com/knowledge/registry-lock-for-ca-domains/

Not all registries support it.

The prices are largely set by the registries and it's then a matter of how much the registrars mark it up for implementing it.

- mark

On 2025-01-08 4:27 AM, Anand Buddhdev wrote:
Hello people! Our current registrar, Gandi, has increased the renewal prices of all our domains (.com, .net, .org and .community) to insane amounts, and we want to switch away from them. We're looking at some other registrars, viz. Joker (Germany), Oxxa (Netherlands) and PorkBun (USA). They all offer the usual features we would want from a good registrar, but none of them have any information on their website about a specific advanced feature we're looking for, which is called "registry lock". This is an advanced feature, where the registry applies a lock on the domain, and changes of any kind have to be verified with a phone call between registry and registrar. This lock is a stronger defence against attacks. When a domain has a registry lock on it, it's visible in the whois output as:

Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited Domain Status: serverRenewProhibited https://icann.org/epp#serverRenewProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited

In the above, the "clientTransferProhibited" is because of a "registrar lock". This is a standard feature provided by almost all registrars, and it's not what I'm after. I'm after the "serverDeleteProhibited", "serverRenewProhibited", "serverTransferProhibited" and "serverUpdateProhibited" lines. These ensure that the domain cannot be deleted, transferred, or modified without a manual check by the registry. Is anyone aware of registrars that provide this service?

Regards,
Anand Buddhdev
RIPE NCC

_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
--
Mark E. Jeftovic <mar...@easydns.com>
Co-founder & CEO easyDNS Technologies Inc.
+1-(416)-535-8672 ext 225

/"Never expect a thing you do not want,
and never desire a thing you do not expect."
-- Bob Proctor /
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to