Core registry concepts

The relevant information obtained by the registration process is grouped into so-called registrable objects.

To ensure the authenticity of the data, only authorized entities (registrars) can perform registrations and modify existing data in the Registry. FRED is structured according to the Registry–Registrar–Registrant model. Registrars communicate with the Registry on behalf of registrants (domain owners).

See also

Concepts – full list of concepts with details

Registry objects

Data stored in the Registry that can be registered and modified by registrars are called objects.

There are four types of objects:

  • domains (regular or ENUM)

  • contacts – domain owners, administrative contacts or technical contacts. FRED can manage both natural and legal persons.

  • nssets – a group of name servers

  • keysets – a group of DNSSEC keys

Objects can be shared, i.e. one contact can be used multiple times with domains, nssets or keysets. Similarly, one nsset or keyset can be linked to several domains.

While it is common to store information about nameservers as separate entities, it is not the case that a nameserver exists as an individual entity in the domain name system. To reflect this, FRED stores nameservers as sets, in order to better reflect the actual use of nameservers. Same applies for DNSSEC keys.

Registry interfaces

FRED separates access to the registry into three distinct interfaces, each designed for a different group of users with different needs and levels of trust. This separation ensures that registrars, administrators and the general public can only perform the operations appropriate to their role.

Administrator Interface

Registry staff use the FERDA web application and the fred-admin CLI to search, inspect and manually edit registry objects; all activity is recorded in a searchable audit log. They can also annually approve/reject the submitted requests made via the public interface after an identity verification.

Registrar Interface

Registrars connect over EPP to create and manage domains, contacts, nssets and keysets; each registrar authenticates with a client certificate and password.

For more information see registrar features

Public Interface

Anyone can query public registry information via Unix WHOIS, the WebWHOIS web application, or the RDAP. Registrants (and general public) can use the WebWhois applications to request an object’s authorization password, request a block or an unblock of their object. They can also download a signed PDF statement of any registry record.

For more information see public interface features