← Back to context

Comment by 3np

5 years ago

Apart from what's been said already: One basket per egg.

Your registrar should be under different administration from your DNS servers (more than one), which should be different from your service (e-mail/web/etc) host(s). If you want to play it real safe you could get matching names under different TLDs, but only after you've separated the above.

This way, either of your nameserver companies closing you off should pose little practical problem, while limiting the relationship with your registrar to nothing more will significantly lower the possibilities of issues occurring there.

Put the account e-mails for the above providers under a different domain than the one under management.

So assuming you don't run your own physical infrastructure (all the power to you if you do) for either part, you need at least 4 different accounts spread over at least 3 different companies.

Putting one of the name servers at either the registrar or the web-hosting provider is not that terrible though, as long as it's not the only one.

5 comments

3np

Reply
YetAnotherNick  5 years ago

> our registrar should be under different administration from your DNS servers (more than one), which should be different from your service (e-mail/web/etc) host(s).

Wouldn't it increase the risk not decrease it? Now there will be three single point of failure and compromise of any of the three party will result in downtime. In theory, the later two could be recovered or moved but your solution doesn't solve any problem.

  • 3np  5 years ago

    The issue OP is asking about is the "everything crumbles" scenario, and (from their comment down the thread):

    > Most importantly securing against account termination and being unable to recover that account (like it happens a lot with Google).

    We are not solving for high availability or minimizing risk of brief downtime here. The DNS part I addressed, so you're really down to two. DNS round-robin and monitoring can get you close enough to one. Until a solution like Handshake/ENS are adopted, you won't get away from the registrar.

  • wlonkly  5 years ago

    Your registRAR's availability doesn't stop your domain from being present at the registRY, but _if_ your DNS provider becomes unavailable you'll be thankful that your registrar is able to change your NS records with the registry.