Glossary
DNS
Registrar
The company you buy and manage a domain through. Your registrar account is the control point for the entire domain, which makes it the highest-impact credential you hold.
Defined in ICANN.
Where this appears
The lessons that use this term, and what each is for.
Domain Security FundamentalsThe hierarchy, and who the three parties areSay who controls each level of a domain name, and which of them you can call.Domain Security FundamentalsThe account that owns everythingExplain why registrar compromise defeats every control below it.DNS Security PractitionerLetting the parent update itselfPublish CDS and CDNSKEY so a rollover needs no registrar interaction.DNS Security PractitionerReading lock stateDetermine from RDAP which locks a domain actually has, and which it only appears to.DNS Security PractitionerThe account outranks every recordRank registrar-account controls against zone-level ones, and defend the ordering.Domain Abuse & ImpersonationAge and timingUse registration date as a signal without over-weighting it.Domain Abuse & ImpersonationPrivacy is not guiltInterpret a privacy proxy correctly, and say what registration data can still tell you.Domain Abuse & ImpersonationReuse across a setLink separate registrations into one campaign from shared infrastructure.Domain Abuse & ImpersonationThe cost of being wrongState what each misclassification costs, and which direction to err in.Brand ProtectionRegistration feedsSay what a newly-registered-domain feed sees, how late it sees it, and what it never sees.Brand ProtectionWhen holding a name pays for itselfDecide whether a specific defensive registration is worth its annual cost.Brand ProtectionWhat to capture, and in what orderAssemble a complete evidence package for a live finding before anything changes.Brand ProtectionThe window closesExplain why evidence gathered after a response has begun is worth nothing.Brand ProtectionFive partiesName every party who can remove a phishing site and what each is able to act on.Brand ProtectionChoosing who to approach firstPick the fastest effective party for a given finding rather than starting at the top.Brand ProtectionTimelines, and where UDRP fitsSet a realistic expectation for each route, and say what a dispute process is and is not for.Brand ProtectionThe first messageWrite an abuse report an overloaded desk can act on without asking you anything.Brand ProtectionWhen nobody answersEscalate an ignored report through the routes that exist, and know when to stop.Brand ProtectionDesigning the handoffDefine where automation stops and what it must hand a person to work with.Domain Trust ArchitectureA definition worth usingDefine domain trust in a way that does not depend on any product or vendor.Domain Trust ArchitectureWhat decays, and how fastGive each control a review cadence derived from how quickly it goes wrong.Domain Trust ArchitectureHandover that survivesProduce the documentation that lets a successor run the programme without you.Domain Security PractitionerThe briefRead an estate description and list what you still have to find out.Domain Security PractitionerWhat a brief always omitsName the facts nobody writes down that decide most of the plan.Domain Security PractitionerThe agency nobody can contactRecover control of a domain administered by a party that no longer answers.Domain Security PractitionerThe first thirty daysChoose the work that ships in a month with no budget and no dependencies.