Many (most?) registrars add DNS you didn't explicitly ask for, like an A record on the root that says "this domain was purchased from Namecheap" or whatever.
Do you know of a registrar that doesn't do that?
Do you know of a registrar that doesn't do that?
> Many (most?) registrars add DNS you didn't explicitly ask for
This relates to TLS since DNS records can be used to request a TLS certificate, but yes, those show in the certificate transparency log, so that you can check. But it won't tell you about other DNS records that may be used for various other purposes.
In the case of cloudflare, it means not being able to use the majority of their services.