Here's a very good guide from GOV UK:
https://www.gov.uk/guidance/keeping-your-domain-name-secure
It's written for domains under gov.uk, but, ignoring that, the rest is universal and thorough.
Ask HN: How do I secure the domain for my business?
11–20 of 64 posts
Re: Ask HN: How do I secure the domain for my business?
#12There are features of domain providers that can prevent domain transfer without certain conditions being met. I don't hold any domains for corporate enterprise purpose but, if I did, I'd be looking for domain registrars that can provide some guarantees. I don't know if such a thing exists, hopefully someone here can answer that, but if not, I'd start making some phone calls/sending some emails to see what/who can off…
Thanks a lot! Yeah, I'm looking for a registrar that ensures high security, availability and most importantly a functional support. I don't mind paying extra bucks. Since I'm from Germany it'd propably be best to also use a provider from Germany in case any legal issues arise.
This is really the best solution: pay (a lot) extra to get a registrar that offers enterprise class support.
Make sure you set up 2FA, fallback email addresses (also 2FA'd), pay for 10 years in advance, etc, but most important is that the company will call you if there's a problem or a transfer request.
Similarly, make sure you call them every 6 months, confirm your authentication process, confirm all your points of contact, confirm billing, etc, etc. Put it in your calendar, and make sure it gets done.
Your domain name is a single point of failure that you cannot avoid: your only choice is to get the best service you can justify in your budget.
Re: Ask HN: How do I secure the domain for my business?
#13Here's a very good guide from GOV UK: https://www.gov.uk/guidance/keeping-your-domain-name-secure It's written for domains under gov.uk, but, ignoring that, the rest is universal and thorough.
Wow, a lot of good advice in there. Thanks!
Re: Ask HN: How do I secure the domain for my business?
#14Iwould recommend using a company in your jurisdiction, they might be less known, a bit pricier, but will have some kind o customer support in your mother tongue in case things should go wrong.
Being a paying customers can do wonders
Re: Ask HN: How do I secure the domain for my business?
#15Iwould recommend using a company in your jurisdiction, they might be less known, a bit pricier, but will have some kind o customer support in your mother tongue in case things should go wrong. Being a paying customers can do wonders
Yeah, that's propably what I'm gonna do. Currently looking into Hetzner for the domain hosting since I'm from Germany.
Re: Ask HN: How do I secure the domain for my business?
#16What are you trying to secure it against? This is always the first step to think about, also known as "threat assessment" or similar. Are you trying to secure it against someone transferring the domains out of your account? Make sure you have all the account security up to date and correct (2FA on the account + the email account that has the ownership), and that all the "transfer locks" are setup (EPP codes and so on…
Most importantly securing against account termination and being unable to recover that account (like it happens a lot with Google).
The only thing that would help you in that case is having an account at another registrar, with a similarly named domain (maybe different TLD, or added word in front of the domain name) that is established as a alternative but rightful domain in case of failure. Test the fail-over process and make sure your documentation describe what domains are legitimate fail-over domains for your users.
Also, chose a registrar that won't just terminate your account over nothing (like Google is famous to do). I've had good luck with DNSimple over the years. Sign up for their enterprise plan and make sure to stay up-to-date on their policies. If you see that they start acting "googley", start thinking about moving to another one.
Re: Ask HN: How do I secure the domain for my business?
#17What if a company incorporates using your name in this or that jurisdiction then claims your .com? It happened in the past (although many companies, at first, simply bought the .com from the early .com hoarders for it was easier and faster than claim the name ownership).
I don't know how you can defend against that, except having a company incorporated with that name in the country which corresponds to the TLD.
Re: Ask HN: How do I secure the domain for my business?
#18Outside the best practices others are mentioning there are companies that specialise or provide high security domain registration, Mark Monitor are the big one. CloudFlare also offer this type of service. I have no idea how much it costs, would actually love to know if anyone has any experience with any of them?
https://www.cloudflare.com/products/registrar/custom-domain-...
Re: Ask HN: How do I secure the domain for my business?
#19Iwould recommend using a company in your jurisdiction, they might be less known, a bit pricier, but will have some kind o customer support in your mother tongue in case things should go wrong. Being a paying customers can do wonders
Yeah, that's propably what I'm gonna do. Currently looking into Hetzner for the domain hosting since I'm from Germany.
I prefer to use a different company for my domains, as for other services--like Mail, Web, Hosting. Therefore, if something happens to one, it doesn't affect my other services.
As you mentioned, you are from Germany. I can highly recommend https://INWX.de —I use them myself, and for hosting, I use Hetzner as well.
Re: Ask HN: How do I secure the domain for my business?
#20Iwould recommend using a company in your jurisdiction, they might be less known, a bit pricier, but will have some kind o customer support in your mother tongue in case things should go wrong. Being a paying customers can do wonders
Yeah, that's propably what I'm gonna do. Currently looking into Hetzner for the domain hosting since I'm from Germany.
Another option in Germany is Key-Systems: https://www.key-systems.net/
No affiliation with them, but my personal domains are registered with a local Dutch registrar, who in turn registers some of them with Key-Systems.