Guides
Accurate, practical explanations of the systems behind every domain.
DNS & nameservers
3 guidesHow the Domain Name System finds your website and mail servers: record types, TTLs and caching, nameservers and DNSSEC, explained step by step.
How DNS Works: Resolvers, Caching and Propagation
A clear walkthrough of how a domain name becomes an IP address, the difference between recursive and authoritative servers, how caching and TTL work, and what DNS propagation really means.
Understanding DNS Records: A, MX, TXT, CAA and More
A practical guide to the DNS record types you are most likely to meet, including A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV and PTR, with examples and the rules that trip people up.
Understanding Nameservers: Delegation, Glue and Changes
Nameservers are the authoritative servers that publish a domain's DNS records. Learn how delegation and glue work, why you need at least two diverse nameservers, how to change them safely and what lame delegation means.
Registration & RDAP
4 guidesRegistration data and RDAP, domain lifecycles from registration to expiry and deletion, transfers, status codes and how top-level domains work.
Domain Expiry Explained: Renewal, Grace and Deletion
What actually happens when a domain name reaches its expiry date, from renewal and grace periods to redemption, pending delete and release, and why the exact timings depend on the registry and registrar.
RDAP vs WHOIS: What Changed and Why It Matters
WHOIS served domain lookups for decades, but its free-form text had no standard format. RDAP replaces it with structured JSON over HTTPS. Here is how the two differ and what that means in practice.
What Is a ccTLD? Country-Code Domains Explained
Country-code top-level domains such as .uk, .in, .au and .np belong to countries and territories and are run under local policies. Learn how they differ from gTLDs, how their structures vary and what IDN ccTLDs are.
What Is RDAP? The Modern Way to Look Up Domain Data
RDAP is the standardized, JSON-based protocol for looking up who registered a domain, when it expires and which registrar manages it. Here is how it works and how to read its results.
Security & email
4 guidesSSL/TLS certificates, DNSSEC and the SPF, DKIM and DMARC records that protect your domain and email from interception and spoofing.
How SSL/TLS Certificates Work and Why They Fail
A plain-language explanation of TLS certificates: the handshake, certificate chains and authorities, how hostnames are matched, automated renewal with ACME, and the most common certificate errors and their causes.
What DMARC Does: Alignment, Policies and Reports
DMARC ties SPF and DKIM to the From address people actually see, tells receivers what to do with mail that fails, and sends you reports. Learn how alignment, policies and reporting work, and how to roll it out safely.
What Is DNSSEC? Signatures, Keys and the Chain of Trust
DNSSEC adds cryptographic signatures to DNS so resolvers can detect forged or altered answers. Learn how keys, DS records and the chain of trust work, what validation failures look like, and the most common way domains break.
What SPF Does: Syntax, Qualifiers and the Lookup Limit
SPF lets a domain list the servers allowed to send its email. Learn how SPF records are written, what -all and ~all mean, why you can only have one record, how the 10-lookup limit works and what SPF cannot protect.
.np domains
1 guidePractical guidance on Nepal's country-code domain (.np): who can register one, required documents, the free registration process and common pitfalls.