3 ms·

They shouldn't publish a zone for a domain they don't control (yet). Regardless of who whois says manages the domain, if I were to query the new registrar's se

They shouldn't publish a zone for a domain they don't control (yet). Regardless of who whois says manages the domain, if I were to query the new registrar's servers they could theoretically send people somewhere else than what was intended with the currently published zone information.

djbusby 2y ago
I don't want them to publish, I just want to create them before migration. Other registrar's had it for a while and Namecheap for sure still don't (maybe their new UI but they lost me years ago)
account42 2y ago
DNS is hierarchical so as long as the root servers point elsewhere it doesn't matter what they publish and once the root servers are updated then the new servers are the authoritive ones.
- nubinetwork 2y ago
  If that was the case, DNS based adblocking wouldn't work, except for gigantic /etc/hosts files.
  - account42 2y ago
    WTF are you talking about. DNS-based adblocking doesn't work by pulling records from random servers.
    - nubinetwork 2y ago
      I point my computer to use a local DNS server, I ask it to resolve an ad domain... the request doesn't go out to the root servers, it gets RPZ denied at the DNS server. The root doesn't mean anything if the local DNS server claims to know the answer to your query. The same goes for a registrar's DNS server that is publishing zones it doesn't own.
      - account42 2y ago
        That still doesn't involve pulling records from random servers like registrar's DNS server for domains they are not yet authorative for.
      - detaro 2y ago
        No, it doesn't, because nobody is configuring systems to query that registrar's DNS server for zones it doesn't own.
      - kchr 2y ago
        What you are describing is a forwarding DNS query resolver, which can be configured to directly answer queries without forwarding them upstream in the DNS hierarchy. This is sometimes used for ad-blocking, but the archetypical example is the DNS resolvers your ISP usually provides. Their purpose is to forward your queries to the nameserver responsible for the zone you ask about. Domain registrars, however, usually do not operate forwarding DNS resolvers. They typically only answer queries for zones that they are responsible for, and give you an NXDOMAIN response for anything else. For this reason, nobody would use a non-forwarding DNS as a resolver for their computer since it would make it near impossible to reach hosts on the Internet (unless you happen to query a record for one of the zones they provide service for).

djbusby 2y ago

I don't want them to publish, I just want to create them before migration. Other registrar's had it for a while and Namecheap for sure still don't (maybe their new UI but they lost me years ago)

account42 2y ago

DNS is hierarchical so as long as the root servers point elsewhere it doesn't matter what they publish and once the root servers are updated then the new servers are the authoritive ones.

nubinetwork 2y ago
If that was the case, DNS based adblocking wouldn't work, except for gigantic /etc/hosts files.
- account42 2y ago
  WTF are you talking about. DNS-based adblocking doesn't work by pulling records from random servers.
  - nubinetwork 2y ago
    I point my computer to use a local DNS server, I ask it to resolve an ad domain... the request doesn't go out to the root servers, it gets RPZ denied at the DNS server. The root doesn't mean anything if the local DNS server claims to know the answer to your query. The same goes for a registrar's DNS server that is publishing zones it doesn't own.
    - account42 2y ago
      That still doesn't involve pulling records from random servers like registrar's DNS server for domains they are not yet authorative for.
    - detaro 2y ago
      No, it doesn't, because nobody is configuring systems to query that registrar's DNS server for zones it doesn't own.
    - kchr 2y ago
      What you are describing is a forwarding DNS query resolver, which can be configured to directly answer queries without forwarding them upstream in the DNS hierarchy. This is sometimes used for ad-blocking, but the archetypical example is the DNS resolvers your ISP usually provides. Their purpose is to forward your queries to the nameserver responsible for the zone you ask about. Domain registrars, however, usually do not operate forwarding DNS resolvers. They typically only answer queries for zones that they are responsible for, and give you an NXDOMAIN response for anything else. For this reason, nobody would use a non-forwarding DNS as a resolver for their computer since it would make it near impossible to reach hosts on the Internet (unless you happen to query a record for one of the zones they provide service for).