On Tue, 2015-07-28 at 10:11 +0200, Mathias Timothy wrote:
  -----Original Message-----
 From: fred-users [mailto:fred-users-bounces@lists.nic.cz] On Behalf
 Of
 Jaromir Talir
 Sent: Monday, July 27, 2015 12:12 PM
 To: Mark Elkins; fred-users(a)lists.nic.cz
 Subject: Re: FRED Registry Lock
 On Mon, 2015-07-27 at 11:08 +0200, Mark Elkins wrote:
  On Mon, 2015-07-27 at 10:50 +0200, Mathias
Timothy wrote:
  Hello everyone, 
 > Can someone help on:
 >
 > 1.       How to lock a domain in the registry to prevent the
 > registrar
 > form updating, transferring and deleting the domain. 
 Registry lock is done by registrant request to registry on
 dedicated website.
 In FRED this website is part of fred-whois package. I guess that it
 has url
 /whois/publicrequest.py bu default. At this website registrant can
 ask to lock
 domain. Registrant must then send officially signed paper to
 confirm his
 authenticity. Registry administrator confirms lock in web
 administration tool
 upon checking valid signature on paper.
  
 Thanks a lot Jaromir for the VERY useful information. I  found it
 exactly as you expressed
 If I may ask, Is it also possible to do it [lock the domain] from the
 command line [using FRED commands] or in a certain configuration file
 when the Registrant has sent the request for the lock of the domain
 through the web form?? 
 
Unfortunately not, the only way is to use web interface.
Regards,
Jaromir
  Confirming the  lock of domain  in web administration
tool is really
 convenient and great but I just want to know if it can be in another
 way as asked above.
 Regards,
 Timothy
  More info here
http://fred.nic.cz/files/fred/fred-locking.pdf
  I'm curious, will this block DNSSEC updates?
 Would a Registrar Update-Lock block DNSSEC updates?
 Hmm.. 
 FRED has dedicated object called Keyset to maintain dnssec material
 (DNSKEY
 objects). You can update keyset even if domain is locked for
 updates. If you
 want to block Keyset updates you have to ask to lock Keyset the
 same way
 how domain is locked. So even when domain is locked, registrar can
 still
 rotate keys (for example). However registrar cannot unlink keyset
 from
 domain.
 Jaromir
 
 Thanks in advance
 Regards,
 Timothy 
 _______________________________________________
 fred-users mailing list
 fred-users(a)lists.nic.cz
 
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users   --
 Jaromir Talir
 technicky reditel / Chief Technical Officer
 -------------------------------------------
 CZ.NIC, z.s.p.o.  --    .cz domain registry
 Milesovska 5, 130 00 Praha 3, Czech Republic mailto:
 jaromir.talir(a)nic.cz
 
http://nic.cz/ sip:jaromir.talir@nic.cz tel:+420.222745107
 mob:+420.739632712       fax:+420.222745112
 -------------------------------------------
 _______________________________________________
 fred-users mailing list
 fred-users(a)lists.nic.cz
 
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users 
 _______________________________________________
 fred-users mailing list
 fred-users(a)lists.nic.cz
 
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users --
Jaromir Talir
technicky reditel / Chief Technical Officer
-------------------------------------------
CZ.NIC, z.s.p.o.  --    .cz domain registry
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:jaromir.talir@nic.cz  
http://nic.cz/
sip:jaromir.talir@nic.cz tel:+420.222745107
mob:+420.739632712       fax:+420.222745112
-------------------------------------------