Registrar locks add friction to domain theft
A registrar lock stops a domain being transferred away without extra steps.
It is a small setting and it sits in front of one of the worst outcomes available to an organisation, which is somebody else taking control of its name. Given that domain theft is usually a matter of compromising one account, a lock that requires an out-of-band action to lift is cheap insurance on an account that is often under-protected.
More on DNS and domains
- DNS is a directory, not proof of safetyIt only answers where
- DNSSEC signs answers but does not hide themA sealed postcard
- Encrypted DNS protects the resolver path, not the destinationCovered to the desk, open to the door
- Registrar compromise can outrank server securityIt all hangs from one fitting
- Dangling DNS can point to somebody else's resourceYour plate, their locker
- Subdomain takeover begins with abandoned ownershipNobody minding the stall