<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hello Anand</p>
    <p>easyDNS supports this - as you noted, this is a <i>registry</i>
      product and distinct from "transfer locks" which are implemented
      at the registrar level.</p>
    <p><a class="moz-txt-link-freetext" href="https://kb.easydns.com/knowledge/registry-lock-for-ca-domains/">https://kb.easydns.com/knowledge/registry-lock-for-ca-domains/</a></p>
    <p>Not all registries support it.</p>
    <p>The prices are largely set by the registries and it's then a
      matter of how much the registrars mark it up for implementing it.</p>
    <p>- mark<br>
    </p>
    <div class="moz-cite-prefix">On 2025-01-08 4:27 AM, Anand Buddhdev
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:released-677e9667b5c506.65029418@esv2.easydns.net">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">Hello people! Our current registrar, Gandi, has
        increased the renewal prices of all our domains (.com, .net,
        .org and .community) to insane amounts, and we want to switch
        away from them. We're looking at some other registrars, viz.
        Joker (Germany), Oxxa (Netherlands) and PorkBun (USA). They all
        offer the usual features we would want from a good registrar,
        but none of them have any information on their website about a
        specific advanced feature we're looking for, which is called
        "registry lock". This is an advanced feature, where the registry
        applies a lock on the domain, and changes of any kind have to be
        verified with a phone call between registry and registrar. This
        lock is a stronger defence against attacks. When a domain has a
        registry lock on it, it's visible in the whois output as:
        <div><br>
          Domain Status: serverDeleteProhibited <a
            href="https://icann.org/epp#serverDeleteProhibited"
            moz-do-not-send="true" class="moz-txt-link-freetext">https://icann.org/epp#serverDeleteProhibited</a><br>
          Domain Status: serverRenewProhibited <a
            href="https://icann.org/epp#serverRenewProhibited"
            moz-do-not-send="true" class="moz-txt-link-freetext">https://icann.org/epp#serverRenewProhibited</a><br>
          Domain Status: clientTransferProhibited <a
            href="https://icann.org/epp#clientTransferProhibited"
            moz-do-not-send="true" class="moz-txt-link-freetext">https://icann.org/epp#clientTransferProhibited</a><br>
          Domain Status: serverTransferProhibited <a
            href="https://icann.org/epp#serverTransferProhibited"
            moz-do-not-send="true" class="moz-txt-link-freetext">https://icann.org/epp#serverTransferProhibited</a><br>
          Domain Status: serverUpdateProhibited <a
            href="https://icann.org/epp#serverUpdateProhibited"
            moz-do-not-send="true" class="moz-txt-link-freetext">https://icann.org/epp#serverUpdateProhibited</a></div>
        <div><br>
          In the above, the "clientTransferProhibited" is because of a
          "registrar lock". This is a standard feature provided by
          almost all registrars, and it's not what I'm after. I'm after
          the "serverDeleteProhibited", "serverRenewProhibited",
          "serverTransferProhibited" and "serverUpdateProhibited" lines.
          These ensure that the domain cannot be deleted, transferred,
          or modified without a manual check by the registry. Is anyone
          aware of registrars that provide this service?</div>
        <div><br>
        </div>
        <div>Regards,</div>
        <div>Anand Buddhdev</div>
        <div>RIPE NCC</div>
      </div>
      <br>
      <fieldset class="moz-mime-attachment-header"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
dns-operations mailing list
<a class="moz-txt-link-abbreviated" href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a>
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a>
</pre>
    </blockquote>
    <div class="moz-signature">-- <br>
      Mark E. Jeftovic <a class="moz-txt-link-rfc2396E" href="mailto:markjr@easydns.com"><markjr@easydns.com></a><br>
      Co-founder & CEO easyDNS Technologies Inc.<br>
      +1-(416)-535-8672 ext 225<br>
      <br>
      <small><i>"Never expect a thing you do not want,<br>
          and never desire a thing you do not expect."<br>
          -- Bob Proctor </i></small></div>
  </body>
</html>