Domain Security

[user-7256]

Are our domains really secure?

What would it take for somebody to crack into the actual ICANN registry (.com names for example) and "change things around a bit"?

What about registrar security? Should there be a law that requires all registrars to have secure user accounts, SSL logins, etc?

-Matt
(EDIT: Hackers are good guys, CRACKERS are bad guys - NOT ... FOOD ...)

 

[DomainSage]

Personally my thoughts on this are that no system is totally secure, I will hold my hands up and say I was a hacker back in the mid 80's. But I think what you are talking about is crakers and not hackers ( BIG difference ).

To my mind the biggest threat to domain security is the inability of users to understand how easily passwords can be cracked, I have confidence in the central system. From what I have seen most problems originate with the user not using a secure password / proper security on their computer ... etc.

When I go to sleep at night the least of my worries is my domain portfolio

All the best.

Richard

 

[CrazyTech]

I think it depends upon the person trying to get in, but no system is really safe if the right person wants access.

 

[user-7256]

True, but how come the ICANN registry of .com names has never been breached?

 

[DomainSage]

Hi Matt,

Mainly because there is no reason to try and and get in, back in the early days of the internet there were groups ( like the lopht, later LHI ) who could have bought it to it's knees. The point is that it is not worth all the s**t that it would bring.

All the best.

Richard

 

[Dave_Z]

True, but how come the ICANN registry of .com names has never been breached?

Because ICANN isn't running the .com Registry. Verisign is.

Verisign has a contract with ICANN to manage the COM NET Registry. So it's
their job to make sure it's safe and secure, not ICANN's.

So far they've done a good job keeping it safe. They've got to, if they know
what's good for them. (and to allow ICANN to let them keep it...)

While it's understandable why some people feel there oughta be a law forcing
registrars to adopt security measures, it's not realistically feasible. Registrars
do try to make their systems as safe and secure as possible, but some people
will try to find a weakness somewhere and exploit it.

One registrar, however, has so far been able to prevent hijackings from taking
place. Kudos to them.

Just because you're paying your registrar to keep it safe for you doesn't mean
you're excused from being careless and having your domain account broken
into. People nowadays seem to be getting lazy and complacent, and just let
others handle things for them.

If you're going to let others handle it for you, make sure you can trust that
person even with your life.

Now we shouldn't be having to do all these things. But the reality is there are
people out there who will try to steal your domain name, and sometimes they'll
exploit your weakness/es (if any) and use it against you.

Bottome line: keeping your domains safe requires mutual cooperation between
you and the registrars you use. They'll do their part to keep them as safe as
possible, you do yours.

 

[tajimd]

NO one can be sure for security. if security exists than ppl to break that security to exist . so u never know when u are hacked. But its better to be secure from ur side.

 

[user-7256]

Ah okay, verisign runs it lol I knew that :D

Thanks for the read everyone ^_^