Comment by YetAnotherNick
5 years ago
> our registrar should be under different administration from your DNS servers (more than one), which should be different from your service (e-mail/web/etc) host(s).
Wouldn't it increase the risk not decrease it? Now there will be three single point of failure and compromise of any of the three party will result in downtime. In theory, the later two could be recovered or moved but your solution doesn't solve any problem.
The issue OP is asking about is the "everything crumbles" scenario, and (from their comment down the thread):
> Most importantly securing against account termination and being unable to recover that account (like it happens a lot with Google).
We are not solving for high availability or minimizing risk of brief downtime here. The DNS part I addressed, so you're really down to two. DNS round-robin and monitoring can get you close enough to one. Until a solution like Handshake/ENS are adopted, you won't get away from the registrar.
Your registRAR's availability doesn't stop your domain from being present at the registRY, but _if_ your DNS provider becomes unavailable you'll be thankful that your registrar is able to change your NS records with the registry.
Even if you registrar's DNS you could change it in the same way. What would using different DNS acheive?
There's three players: registry, registrar, and DNS host. The parts that affect your availability are the registry's nameservers and your DNS host. The registrar is the control plane for the registry -- if your registrar is unavailable and your registry and DNS host are fine, you're still up.
If your DNS host is unavailable _and_ they're your registrar, then you can't make changes at the registry to use a different DNS host.
But if they're unavailable and they're not your registrar, then you can still make changes at the registry to use a different DNS host (although you'll still have to deal with the two-day TTL on the NS records at the root).
So the idea of using a different registrar and DNS host amounts to separating the control and data plane for your domain.