Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 8 down vote favorite

I am looking for a DNS registrar that supports strong multi-factor authentication.

  • Does any DNS registrar support multi-factor?

  • Is this a legitimate need?

share|improve this question
3  
It absolutely is a legitimate need! Who can compromise your account at your DNS registrar can steal your domain, trivially divert all your resources that are found via DNS (e.g. mail MXes, web sites), and then change the DNSSEC keys and compromise all the DNSSEC-protected things (e.g. SSHFP, DANE), and more. Once DNSSEC becomes well deployed, the weak link in the authentication chain may well be DNS registrars, moreso than the ultimately trusted DNS root key. – Celada Dec 16 '12 at 4:42
Namecheap.com doesen't offer multi factor authentication, but it give you the option to totally disable the password recovery options of your account – Max Dec 20 '12 at 8:37

2 Answers

up vote 3 down vote

I'd say that this could definitely be a legitimate requirement. Control over DNS records for a domain can give a lot of power to an attacker (adding new hosts in a domain for a phishing attack or even redirecting a comapanies home page), so protecting it from attack is important and as with all publicly accessible high-value services, using 2-factor auth is good thing to consider.

As to providers that support it DNSimple is one that does.

share|improve this answer
up vote 1 down vote

I just did a similar search across some name registrars and it seems that Name.com and GoDaddy both support 2FA, the former using the Verisign/Symantec VIP and the latter using SMS for US numbers only.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.