Adding Multi Factor Authentication support

Posted on 31 March 2020

In addition to the recent introduction of adding API keys, now we are adding Multi-Factor Authentication support. Multifactor authentication (MFA) is a security system that requires more than one method of authentication from independent categories of credentials to verify the user’s identity for a login or other transaction.

Multifactor authentication combines two or more independent credentials: what the user knows (password), what the user has (security token) and what the user is (biometric verification).

We will support the following methods for MFA:

  • Webauthn (FIDO2) supporting Touch or Pin and Touch sensor like Yubikey with secure elements, Software authenticators and also …

.SE & .NU removing forms requirement on transfers and registrant changes.

Posted on 31 January 2020

Last year in the new Registry-Registrar agreement the Swedish registry has made “everyday life easier” by lifting the required transfer form that needed to be filled in when transferring a domain / changing a registrant.

Due to this from February 3rd onward no more manual work is needed with a .SE/NU transfer and every change will have a digital timestamp. The implications and changes in behavior compared to the current situation that you may be used to are:

  •  Domain update with registrant change is not charged anymore.
  • No more registrant change form/mail.
  • External & internal transfers will no longer keep …

Streamlining domain name abuse reports and disclosure requests

Posted on 24 October 2019

We released a few new features, one of them, RDAP reseller Vcard. 

To further streamline abuse reports & disclosure requests, Realtime Register introduces the Abuse Vcard. This Vcard will display your (reseller role) abuse contact details through RDAP. 

Showing your (external) abuse contact information will increase the speed of abuse reporting. 

Internal abuse email address/information. 

Resellers can also enter abuse contact information for our abuse & support staff. 

We are not setting requirements here for our resellers, but it would be good if this email address is monitored 24/7. We intend to use this info for emergency communications when dealing …

Using Spiderfoot to combat domain name abuse/security threats

Posted on 21 October 2019

“Behavior reflects personality. The best indicator of future violence is past violence. To understand the “artist,” you must study his “art.” The crime must be evaluated in its totality. There is no substitute for experience, and if you want to understand the criminal mind, you must go directly to the source and learn to decipher what he tells you. And, above all: Why + How = Who.”
― John E. Douglas, Mindhunter: Inside the FBI’s Elite Serial Crime Unit

The above quote is also applicable when you deal with cybercrime investigations. Though registrars usually do not deal with serial killers, …

Nic IT and consent for publishing data?

Posted on 2 May 2019

The Italian registry has made some changes to their production system and in my opinion, it is not an improvement.

Till today you could opt out for publishing data in the WHOIS for the following entities:

  • Natural persons Italian and EU based
  • Freelance workers/professionals (Italian based)
  • Italian Companies/one-man companies (Italian based)
  •  Public organizations (Italian based)
  •  Non-profit organizations(Italian based)
  •  Foreign companies/organizations matching 2-6 (EU based)
  •  Other subjects (Italian based)

Since today the opt-out is available for natural persons only.
All other entities must agree to the fact that its data will be published in the WHOIS. If the registrant is …

Brexit & Domain Names, recipe for Chaos?

Posted on 21 January 2019

The short answer is no, depending on the scenario.

While there are many Brexit experts, their views and opinions are not helping when it comes to making business decisions. When it comes to predictions, it might be even better to check the British bookmakers and get a sense of the betting odds if there will be a Brexit or not.

 

However, we can make a few assumptions when it comes to domain names and the Brexit, let us assume the worst scenario; hard Brexit, as in no deal.

The issue
In case of a, no deal Brexit currently slated …

Brexit, and the impact on .EU domain names, sound the alarm?

Posted on 8 August 2018

Update 04-01-2019

The British government issued further guidance regarding the Brexit and Eurid.

Click here to view the guidance and scenarios.

Update 05-11-2018

It seems very likely the two scenarios posted below are the most likely outcome as we quickly move towards the deadline of 29th of March 2019.

(1) If the UK exits the EU and becomes a temporary member of the European Economic Area (EEA) there will be no issue until the duration of such membership.

(2) If however, it turns out to be a “hard Brexit” or “no deal Brexit” than registrars are no longer in a …

Registration changes for .ES and new contractual obligations for our resellers.

Posted on 16 July 2018

And it is not going to get easier for sure.

At the moment we run a validation process, this process also makes sure that there is a registration contract between Realtime Register, Esnic and the registrant, as required by the registry. An easy process for you as a reseller.

However, with the GDPR and some local laws in Spain which go beyond the original purpose of domain name registrations, the contractual requirements for the registrant and reseller increased in such a manner that we are no longer in a position to create such contracts for our resellers in a one …

GDPR and SSL

Posted on 25 May 2018

Due to the recent developments regarding the public WHOIS and GDPR, limiting the output of WHOIS Servers it has become somewhat more difficult to order an SSL certificate, as email address validation might in some cases no longer be an option due to such restrictions imposed by the GDPR.

Email Validation for DV (domain validated) SSL certificates can only be approved via the default mail addresses known as:

  • admin@example.com
  • administrator@example.com
  • hostmaster@example.com
  • postmaster@example.com
  • webmaster@example.com

For more information regarding the GDPR and the changes to the WHOIS output can be found:

The ICANN WHOIS system is gone, the process for a GDPR …

Privacy by default account setting.

Posted on 20 May 2018

Today we introduce a new account setting called:”Default Privacy Protect setting”, which you can access by clicking here.

Setting disabled.

When selected, domain name registrations and transfers will not use our privacy service automatically. This is how it used to work for years.

Setting enabled when free (and available)

When enabled all domain name registrations and transfers will automatically use our privacy service. Regardless if you use WHMCS, our API or the domain name manager.

A list of available TLDs that can be used for this service is located here.

We keep recommending this service as it is unknown if …

Realtimeregister.com tracks users anonymously using Google Analytics cookies. Please view our Privacy Statement for more information.