{"id":12676,"date":"2023-07-20T07:00:00","date_gmt":"2023-07-20T11:00:00","guid":{"rendered":"https:\/\/www.cscdbs.com\/blog\/?p=12676"},"modified":"2024-05-07T10:32:53","modified_gmt":"2024-05-07T14:32:53","slug":"have-you-reviewed-your-domain-lock-portfolio","status":"publish","type":"post","link":"https:\/\/www.cscdbs.com\/blog\/have-you-reviewed-your-domain-lock-portfolio\/","title":{"rendered":"Have You Reviewed Your Domain Lock Portfolio?"},"content":{"rendered":"\n

Domain names give your intellectual property visibility, as well as provide function for your company\u2019s infrastructure. Vital domain names are simply too important to be left exposed. To protect them, you can add extra layers of security to your digital brand with easy, secure, server-level protection in addition to multi-level locks that combat domain name system (DNS) hijacking and protect against unauthorized changes and deletions to your critical domain names.<\/p>\n\n\n\n

DNS hijacking is when a bad actor can divert company customers to a fake website to steal login credentials and confidential data. This poses a threat as not only a serious data breach, but a privacy nightmare, especially in light of more stringent government privacy policies, like the EU\u2019s General Data Protection Regulation (GDRP). Information can also be harvested from inbound company emails, then used to launch sophisticated phishing attacks on customers and employees using a company\u2019s own domains to make the phish appear legitimate. This scenario is a major business continuity risk.<\/p>\n\n\n\n

<\/div>\n\n\n\n

Three reasons it\u2019s essential to review your domain lock portfolio regularly<\/strong><\/h2>\n\n\n\n
<\/div>\n\n\n\n
    \n
  1. Your domain portfolio is constantly changing with the launch of new brands, the retirement of old ones, developing operations in new markets, as well as buying and selling businesses. Therefore, you need to both understand what your business-critical domains are at any given time, and ensure they\u2019re secured properly\u2014including implementing domain locks.

    <\/li>\n\n\n\n
  2. At the same time, the domain registries are constantly updating their offering and processes, and as new domain extensions become available for locks, it\u2019s important to ensure you\u2019re taking advantage of them.

    <\/li>\n\n\n\n
  3. DNS hijacking is a constant threat, but it can be mitigated. Registry locks are the most effective preventive measure that should be put in place.<\/li>\n<\/ol>\n\n\n\n
    <\/div>\n\n\n\n

    CSC\u2019s MultiLock<\/strong><\/strong><\/h2>\n\n\n\n

    At CSC, we combine the aforementioned locks with an additional mechanism not shown in the WHOIS to protect any THIN WHOIS details held with us as the registrar to offer our MultiLock service. Specifically, we don\u2019t allow any changes through our Domain Manager if MultiLock is enabled, and this is achieved by cutting off automated access to the WHOIS database we manage. This ensures that every step of the chain requires manual validation, meaning the request will be validated by two separate checkpoints\u2014between the client and registrar, and then between the registrar and registry. This approach means that regardless of a THICK or THIN registry, your business-critical domains are protected from the risks of domain hijacking, DNS hijacking, and malicious deletions.<\/p>\n\n\n\n

    The locks provide the following protections:<\/p>\n\n\n\n