0

I want to register a domain for my hosted website and hosted e-mail. I am concerned that if i provide personal info my data will be used by spammers, identity thieves. or other attackers.

I don't want to disclose personal info even to domain registrant. What should i do? Should I just provide fake info into registration form? Or what else?

marked as duplicate by dan Jul 11 at 1:58

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1

Should I just provide fake info into registration form?

Certainly not. If you read all fine prints in the contract between you and the registrar you will choose to buy the domain, contract that will reference also the contract between the registrar and the registry, you will always see clauses akin to:

"Providing false information is ground for domain name cancellation".

Your only course is to find a trusted third party. This can be someone you know, the registrar, or a third party.

For example you can ask one of your friend to register the domain for you. Problem though: in case of any disputes, your friend will be deemed the owner of the domain, not you. So you need to use a trusted friend,

Or you use a trusted registrar (and no one here or elsewhere can tell you which registrar to trust or not, this is a highly subjective matter that moves in space and time). Many (most?) of them provide (sometimes for free, sometimes as a paying addon, again, read the fine print) a proxy/privacy service.

With such a service, they will basically list other information instead of your personal data. Note that the registrar still has your personal data and will feel compelled to disclose it anytime there is a dispute on your domain. But the registry will not have it. Even if the registrar does not provide that you can find third parties to replace you in such way. Again, of course, you need to trust them. For different reasons but same results, some big companies sometimes let their lawyers register domain names instead of themselves directly so that new domains (that could disclose in fact just with their name some future new service/product by the company) do not appear linked to them.

In some TLDs, specifically ccTLDs, and even more in the wake of the GDPR, there is an option to protect individuals and not display them in whois. In that case the registrar has your personal data, and the registry has it too, but the registry will not disclose it in whois queries. For that to work typically the registrar needs, upon domain name registration, to send the appropriate "flag" to tell the registry you are an individual and hence the data should not be disclosed.

So in short your question is too vague and will at least depend on which TLD you are interested in, and you will need to shop around to find the perfect registrar for your use case that is accredited in this TLD. But providing false information is never the good way to handle that.

  • Do you know how registrant checks for validity of personal info? some registrant don't even require street address, and some require fixed phone line ,that not all people have. Maybe by cell phone? And how often is personal info checked? – guest Jul 10 at 20:48
  • Registry not registrant in your previous comment. The registrant is the domain name owner. – Patrick Mevzek Jul 10 at 20:53
  • "some registry don't even require street address". you think so? Which ones? – Patrick Mevzek Jul 10 at 20:53
  • You seem clearly to want to engage into the idea of giving bad information so I will not pursue entertaining yourself with this idea because it is wrong. It is irrelevant how often and how registries check things. You risk loosing your domains. So take the bet if you want, but do not come later crying that the valuable domain has been lost. Just READ the contract you are about to sign to get a domain and the sections about wrong data. – Patrick Mevzek Jul 10 at 20:54
  • "some require fixed phone line" I know no registries requiring a fixed phone line (but I can very simply admit not knowing all of them). At most they require a phone number, whatever form it is. And if you do not have a phone number, then as explained in length, you ask for someone else to register the domain in your place. With all the attached caveats. – Patrick Mevzek Jul 10 at 20:56

Not the answer you're looking for? Browse other questions tagged or ask your own question.