[dns-operations] Registrars with a "registry lock" service

[Peter Thomassen]

Hi Anand,

Hexonet supports it for .com, .net, and some other TLDs, but unfortunately not for .org (where we need it) and .community: https://wiki.hexonet.net/wiki/Registry_Lock#Supported_TLDs

We got an account there; feel free to message me privately if you need more info.

Best,
Peter

On 1/8/25 10:27, Anand Buddhdev wrote:
> Hello people! Our current registrar, Gandi, has increased the renewal prices of all our domains (.com, .net, .org and .community) to insane amounts, and we want to switch away from them. We're looking at some other registrars, viz. Joker (Germany), Oxxa (Netherlands) and PorkBun (USA). They all offer the usual features we would want from a good registrar, but none of them have any information on their website about a specific advanced feature we're looking for, which is called "registry lock". This is an advanced feature, where the registry applies a lock on the domain, and changes of any kind have to be verified with a phone call between registry and registrar. This lock is a stronger defence against attacks. When a domain has a registry lock on it, it's visible in the whois output as:
> 
> Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited <https://icann.org/epp#serverDeleteProhibited>
> Domain Status: serverRenewProhibited https://icann.org/epp#serverRenewProhibited <https://icann.org/epp#serverRenewProhibited>
> Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited <https://icann.org/epp#clientTransferProhibited>
> Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited <https://icann.org/epp#serverTransferProhibited>
> Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited <https://icann.org/epp#serverUpdateProhibited>
> 
> In the above, the "clientTransferProhibited" is because of a "registrar lock". This is a standard feature provided by almost all registrars, and it's not what I'm after. I'm after the "serverDeleteProhibited", "serverRenewProhibited", "serverTransferProhibited" and "serverUpdateProhibited" lines. These ensure that the domain cannot be deleted, transferred, or modified without a manual check by the registry. Is anyone aware of registrars that provide this service?
> 
> Regards,
> Anand Buddhdev
> RIPE NCC
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-- 
Like our community service? 💛
Please consider donating at

https://desec.io/

deSEC e.V.
Kyffhäuserstr. 5
10781 Berlin
Germany

Vorstandsvorsitz: Nils Wisiol
Registergericht: AG Berlin (Charlottenburg) VR 37525