What is a domain name registrar?

A domain name registrar is a business that handles the reservation of domain names as well as the assignment of IP addresses for those domain names. Domain names are alphanumeric aliases used to access websites; for example, Google’s domain name is ‘google.com’ and their IP address is 192.168.1.1. Domain names make it easier to access websites without having to memorize and enter numeric IP addresses. (For more on how this works, see What Is DNS?)
It should be noted that registrars don’t actually manage and maintain domain names; that part is done by a domain name registry.

Are registrars the only ones who can sell domain name registrations?

Resellers are another type of organization that sell domain name registrations. These resellers sell domain names on behalf of a registrar in return for a finder’s fee. While these resellers are legitimate, they are usually operated as a side business, and can thus lack dedicated customer support.
Resellers’ websites rarely explicitly state that they are resellers, and it can be tricky to tell them apart from registrars. Fortunately there’s an easy way to know if a company is a legitimate registrar: ICANN has a published list of every accredited and active domain name registrar on their website.

How do domain name registrars protect user privacy?

Everyone who reserves a top-level domain name must fill out WHOIS information for that domain. This is information about the person who registered the domain (the registrant), including their name, email address, physical address, and phone number.

Many registrars provide the option of a private registration. In this arrangement, the registrar’s information is provided in the WHOIS listing for that domain, and the registrar acts as a proxy for the registrant. This private registration is only as secure as the registrar, since the actual registrant’s information is held in the registrar’s database.

What role do registrars play in DNS security?

As organizations that sell domain registrations and have access to registration information, registrars must keep their data and access secure from malicious actors.

In the past, some registrars have played a role in domain hijacking attacks, which can either change the registration of a domain name without the original registrants’s permission or abuse the privileges of domain hosting and registrar software systems. One example of domain hijacking is an attacker making a particular domain direct to a different website, in order to impersonate the original site or disrupt its business.

ICANN recommends that registrars take a number of steps to prevent domain hijacking, including:

> Better management of AuthInfo Codes — randomly generated codes that play a role in the domain transfer process

> Better implementation of domain locks — settings that keep domains from being transferred

> Improved identity verification for all registration processes

> Improved record keeping for domain changes