DOMAIN SECURITY
Domain security is discussed almost entirely as a technical subject, which is odd, because the overwhelming majority of domain losses are administrative: an account nobody could access, a transfer nobody noticed, a record nobody removed.
The technical attacks are real and worth understanding, but they are rarer than the boring failures and easier to prevent once you know they exist.
This guide covers the full range, from registrar account compromise to subdomain takeover, ordered by how likely each is to actually happen to you.
In this guide you will learn:
Ordered by frequency, which is not how it is usually taught.
The most common route, and what follows it.
Registrar lock, registry lock, and the gap between them.
Cache poisoning, hijacking, and what DNSSEC does about it.
Dangling records and NS delegation, structurally.
Typosquatting, homographs, and what they are used for.
Spoofing, display names, and business email compromise.
By likelihood, not by how frightening it sounds.
Chapter 1
Ordered by frequency, which is not how it is usually taught.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Chapter 2
The most common route, and what follows it.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Chapter 3
Registrar lock, registry lock, and the gap between them.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Chapter 4
Cache poisoning, hijacking, and what DNSSEC does about it.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Chapter 5
Dangling records and NS delegation, structurally.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Chapter 6
Typosquatting, homographs, and what they are used for.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Chapter 7
Spoofing, display names, and business email compromise.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Chapter 8
By likelihood, not by how frightening it sounds.
This chapter is not written yet. Drop the prose into
guide-bodies/<body>.html and rebuild.
Check yours
Everything in this guide, checked on your domain in about ten seconds. Free, no account, every finding shown in full.