Hacker News Reader

Comment by duskwuff | Hacker News Reader

> CloudFlare sets them to “pendingdelete” status

This isn't an action which a registrar is generally able to perform.

Domains naturally transition to the pending delete status at the end of the redemption grace period (i.e. 1 to 2 months after the domain expires, and at least one month after the domain stops resolving).

View on HN

It sounds like the domain was deleted. that is absolutely an action a registrar can take and you would have a pendingDelete status in addition to a redemptionPeriod status on the domain.

If I had to guess they kill an account and delete any of its domains, which is absolutely the wrong way to go about handling that. The domain is already registered so you move it to a holding an account for further resolution. just because you terminated an account you shouldn’t be deleting a domain.

I strongly suspect that that's not an action a registrar is allowed to perform. Do you have any documentation on what would allow them to do that?

It's technically possible but very uncommon, and using it on an active registration will raise some eyebrows at the registry. I'd almost forgotten it was an option at all.

https://datatracker.ietf.org/doc/html/rfc2832#section-4.3.3

You linked the wrong doc. You want domain delete

https://datatracker.ietf.org/doc/html/rfc5731#section-3.2.2

Quite interesting, but aren't there restrictions on what circumstances they're allowed to delete domains? This section of the doc doesn't seem to speak to that, or maybe it's another doc entirely.

When a domain expires it’s automatically renewed at the registry in the case of gTLD’s.

A registrant then has 30-44 days (depending on the registrar) to “renew” but in fact the domain has already renewed so in what happens is the registrar deletes the domain in the case where they don’t have that affirmative action.

Right but that wouldn't apply here I'd assume, unless we're saying the customer's domain was already expired and they didn't renew it?

It does apply here. A domain does not need to be expired, a delete can be sent any time it’s active. The only prohibition is if the domain has “clientDeleteProhibited” status which the registrar can remove.

I must be missing something. Then why does your previous comment start with "When a domain expires" ?

I think they are saying that is /why/ the capability exists, but in this case the capability is being used beyond its intended scope.

Pretty much, there have been times I’ve deleted a domain due to compliance/legal type issues. It’s more expedient than waiting for an expiration

That's possible, but I'm _pretty_ sure that's not how it works, there are restrictions on what circumstances registrars are allowed to do various actions too.

I was just illustrating the normal circumstance delete is used. But there is no reason a delete can’t be used any time on an active domain.

All I can say is read the rfc or take my word for it, I’ve run a registrar.

Reply on news.ycombinator.com