[dns-operations] Registrars with a "registry lock" service

[Jay Acuna]

On Wed, Jan 8, 2025 at 2:02 PM Randy Bush <randy at psg.com> wrote:
> i am a happy joker customer.  they have it
>     The protection of a domain name ("domain locking")
>     provides an additional layer of security against
>     unauthorized domain manipulation.

If they intend this to describe registry lock, then they should have
made it more clear.

It sounds like exactly verbiage typically used to describe the weaker
Registrar Lock  feature (clientTransferProhibited, etc.)  instead of
the Registry-controlled Lock
(serverUpdateProhibited,  serverTransferProhibited, serverDeleteProhibited).

Especially the part about "Just login to your account" and remove it at the
servicezone if you want to remove the lock.

A key feature of the registry lock is there is No easy removal of the lock.
The added level of security is only as good as your registrar's additional
manually security procedures to confirm authorization for removing the
lock before they proceed.

Your registrar has no access to remove the registry lock without manually
verifying it,  and they are to manually verify with the customer before they
do so.

Meaning you can't "log in" to an account and remove the lock from a service
zone.  You can log in to an account and initiate the process which includes
the registrar having to call you on the phone to verify your identity, then
have you confirm the unlock and provide a secret offline authorization
phrase, etc.

>     If you decide you do need to unlock your domain
>     (needed to transfer a domain to another
>     registrar),
>      simply log in to your account at
>     Joker.com and remove the lock with the help of our
>     'Servicezone'.
>
>     This procedure conforms to the ICANN regulations
>     from November 12th, 2004.
>
> randy
--
-J