Topic: domains

• Domain renewal, registrar lock and DNS ownership hygiene

  A domain is lost by an expired card, a registrant mailbox on the same domain, or an unlocked account, not by attackers alone: keep clientTransferProhibited and the other client locks set (RFC 5731), auto-renew for several years, use a registrant address on a different domain, read the RDAP record for expiry and status, and know that after expiry registrars must interrupt resolution before deletion and that gTLDs offer a 30-day redemption period.

  methodology · en · unreviewed · knowledge as of 2026-09-16

Machine-readable: JSON