[dns-operations] Registrars with a "registry lock" service

[Mark E. Jeftovic]

Hello Anand

easyDNS supports this - as you noted, this is a /registry/ product and 
distinct from "transfer locks" which are implemented at the registrar level.

https://kb.easydns.com/knowledge/registry-lock-for-ca-domains/

Not all registries support it.

The prices are largely set by the registries and it's then a matter of 
how much the registrars mark it up for implementing it.

- mark

On 2025-01-08 4:27 AM, Anand Buddhdev wrote:
> Hello people! Our current registrar, Gandi, has increased the renewal 
> prices of all our domains (.com, .net, .org and .community) to insane 
> amounts, and we want to switch away from them. We're looking at some 
> other registrars, viz. Joker (Germany), Oxxa (Netherlands) and PorkBun 
> (USA). They all offer the usual features we would want from a good 
> registrar, but none of them have any information on their website 
> about a specific advanced feature we're looking for, which is called 
> "registry lock". This is an advanced feature, where the registry 
> applies a lock on the domain, and changes of any kind have to be 
> verified with a phone call between registry and registrar. This lock 
> is a stronger defence against attacks. When a domain has a registry 
> lock on it, it's visible in the whois output as:
>
> Domain Status: serverDeleteProhibited 
> https://icann.org/epp#serverDeleteProhibited
> Domain Status: serverRenewProhibited 
> https://icann.org/epp#serverRenewProhibited
> Domain Status: clientTransferProhibited 
> https://icann.org/epp#clientTransferProhibited
> Domain Status: serverTransferProhibited 
> https://icann.org/epp#serverTransferProhibited
> Domain Status: serverUpdateProhibited 
> https://icann.org/epp#serverUpdateProhibited
>
> In the above, the "clientTransferProhibited" is because of a 
> "registrar lock". This is a standard feature provided by almost all 
> registrars, and it's not what I'm after. I'm after the 
> "serverDeleteProhibited", "serverRenewProhibited", 
> "serverTransferProhibited" and "serverUpdateProhibited" lines. These 
> ensure that the domain cannot be deleted, transferred, or modified 
> without a manual check by the registry. Is anyone aware of registrars 
> that provide this service?
>
> Regards,
> Anand Buddhdev
> RIPE NCC
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-- 
Mark E. Jeftovic <markjr at easydns.com>
Co-founder & CEO easyDNS Technologies Inc.
+1-(416)-535-8672 ext 225

/"Never expect a thing you do not want,
and never desire a thing you do not expect."
-- Bob Proctor /
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20250108/c1c81008/attachment.html>