Glossary
Registrar
Registry lock
A stronger, registry-level hold requiring out-of-band human verification before any change. It deliberately makes legitimate changes slow, which is the point for a domain that must not move.
Defined in RFC 5731 §2.3.
Where this appears
The lessons that use this term, and what each is for.
Domain Security FundamentalsLocks, contacts and expiryAudit a domain’s registrar-level controls and name what is missing.DNS Security PractitionerReading lock stateDetermine from RDAP which locks a domain actually has, and which it only appears to.Domain Trust ArchitectureImpact against effort, honestlyRank remediation without pretending either axis is more precise than it is.Domain Security PractitionerThe listWrite the not-doing section for a specific estate, with triggers.