# Domain and DNS security: preserve control of the address your users trust

Source: https://www.web3sec.news/blog/domain-dns-security-runbook
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Separate registrar, DNS and hosting ownership records.
- [ ] Verify renewal payment and alternate recovery contacts.
- [ ] Scope DNS tokens and protect ownership changes.
- [ ] Test DNSSEC validation and rollback on a safe domain.
- [ ] Monitor nameservers, mail routing and critical records.

## References
- [ICANN: locked domains and transfer status](https://www.icann.org/resources/pages/locked-2013-05-03-en)
- [Cloudflare: DNSSEC documentation](https://developers.cloudflare.com/dns/dnssec/)