Skip to content

Registry lock

Against your domain names hijacking

As the news have proved it many times, domain names hijack­ings are more and more fre­quent and there are many exam­ples (NYTimes.com hijacked towards a page of the SEA – Syr­i­an Elec­tron­ic Army -, Twit­ter, BBC, etc.).

Faced with this men­ace, the Reg­istry lock pro­vides an addi­tion­al pro­tec­tion to your strate­gic domain names by pre­vent­ing any risk of admin­is­tra­tive and tech­ni­cal hijack­ing with a lock­ing and authen­ti­ca­tion sys­tem by the reg­istry.

Registry Lock - Against your domain names hijacking - Nameshield

The reg­istry lock allows the domain name own­er to indi­cate to the reg­istry that he wants the lock­down of the domain name’s infor­ma­tion. The unlock­ing is exe­cut­ed after the owner’s authen­ti­ca­tion, called authen­ti­cat­ed con­tact.

The reg­istry lock blocks a name on dif­fer­ent oper­a­tions like the DNS serv­er mod­i­fi­ca­tion, the con­tact mod­i­fi­ca­tion, the domain trans­fer and the domain name dele­tion.

This secu­ri­ty mech­a­nism is exe­cut­ed through a high­ly secured man­u­al process, and pro­vides a pro­tec­tion for all strate­gic domain names:

Registry Lock - Against your domain names hijacking - Nameshield
Reg­istry lock unlock­ing

The reg­istries that pro­pose this lock and the asso­ci­at­ed exten­sions are:

This lock­ing ser­vice at reg­istry lev­el is rec­om­mend­ed for your most strate­gic domain names. The reg­istry lock­ing ser­vice is part of the secu­ri­ty rec­om­men­da­tions stat­ed by ANSSI (French Nation­al Agency of Secu­ri­ty of Infor­ma­tion) in its guide of the best secu­ri­ty prac­tices.

Registrar Lock

All the reg­istries don’t pro­pose the reg­istry lock. Nameshield has also deployed a Reg­is­trar lock, in order to address the lack of secur­ing for a strate­gic domain name which exten­sion might not be cov­ered by a lock at reg­istry lev­el.

On the same Reg­istry lock mod­el, the reg­is­tra­tion offices can ask to the reg­istry the freeze of a domain name’s data, in order to pre­vent all oper­a­tion of fraud­u­lent domain trans­fer or result­ing of a mis­take, from a reg­is­trar to anoth­er, like a trans­fer of own­er.

This mech­a­nism is called Reg­is­trar lock and dif­fers from the Reg­istry lock, because the unlock­ing is man­aged by the reg­is­tra­tion office.

DNS Bas­tion

DNS Pre­mi­um

SSL cer­tifi­cates

High­ly secured plat­form

ISO 27001 cer­ti­fi­ca­tion