Blog

Buying and Owning a Domain: Registry, Registrar, Nameserver Delegation and Not Losing Your Domain

A registry runs the TLD, a registrar sells the domain and you own it as the registrant; where its DNS lives is decided by the nameservers you enter at the registrar, after which the registrar's own DNS screen has no effect. In a two-container BIND lab we look at referrals, glue records and lame delegation, write a script that tracks expiry via RDAP, and build a checklist of lock, MFA and auto-renew so you don't lose the domain.