[NicoJuicy]

Custom domains aren't secure though, it's probably the most vulnerable and easiest point of attack

[wwn_se]

Any decent registrar should force 2fa on request. Also long dns ttl and monitoring!

[chenster]

What is that?

[gruez]

Usually social engineering the domain registrar into transferring the domain.

[anoncake]

So Google's approach to customer support is a security feature?

[NicoJuicy]

No, using Hotmail or Gmail prevents dns hijacking.

The answer he gave you was correct. The interpretation wasn't

[anoncake]

No, it prevents social engineering.

[saalweachter]

This is where Google as a domain registrar really shines. :-P

[s_y_n_t_a_x]

You can lock it though.

[kilo_bravo_3]

Mine is. And it's all 2FA'd up. That was a part of the "Take Responsibility for your Own Stuff: For Dummies" guide I followed.

I imagine it would be easier to socially engineer a cellphone store employee and get a SIM to do a SMS-based password reset for a Google/Microsoft/Apple email account than it would be to hijack my domain.

[minifigone]

Do you have a link to the guide you mentioned?

[sachdevap]

I'd like to see this guide too, please.