On: Does Your Domain Have a Registry Lock?

[fierro]

This does not seem like a sound philosophical security posture -- that only domains who are "massive targets for hacking" should use Registry Lock.

[kube-system → fierro]

Security and usability is always a compromise. Otherwise we'd all use one-time pads for everything on the internet.

[ta999999171 → kube-system]

The public will soon find out that we should.

[james_pm → fierro]

It's one of the situations where registry lock is a useful tool with appropriate trade offs. It's far from the only one.

[tialaramex → fierro]

Why? It's about threat models.

[andreareina → tialaramex]

I would say because it's a small cost for the domain owner in return for protecting against what's potentially a pretty big emotional (and possibly reputational, financial) downside.