gtld Registrar Manual Part V : Delta

Transcription

1 gtld Registrar Manual Part V : Delta Copyright Ó 2016 DNS Belgium vzw/asbl 1

2 Table of contents Table of contents Introduction Business rules Differences Commonalities EPP Differences Commonalities Registrar panel Differences DAS & WHOIS Differences Commonalities Registry actions with visibilty to the registrar/registrant Differences Commonalities Copyright Ó 2016 DNS Belgium vzw/asbl 2

3 1 Introduction This document is used to provide the registrars with the changes when migrating from the current system to DNS Belgium's new Registration system. 2 Business rules 2.1 Differences Following business rules are different before and after migration.. Action New Old Billing/Credits Domain renewal Grace periods Post-pay system, no credits. Both registry and registrar are protected from going into deep costs with the Protected transactions threshold. auto-renew per registrar is default and can't be turned off. The renew command is also implemented because of ICANN requirements. The EPP statusses ServerRenewProhibited / ClientRenewProhibited can be used by the registrar to disable the auto-renew feature on a per-domain basis. Auto-renews are prevented by this status. Renews are also prevented by this status (as per definition). DNS Belgium doesn t support grace periods as described in RFC Pre-pay system and virtual credits. Opt-in per registrar for auto-renew, default is set to active when a new registrar is created. Registrars can also send in renew commands. The EPP statusses ServerRenewProhibited / ClientRenewProhibited have no effect on auto-renews. Status is automatically set by the system when the max renewal period is reached. All grace periods are applicable and have an impact on billing: addgrace renewgrace autorenewgrace Copyright Ó 2016 DNS Belgium vzw/asbl 3

4 transfergrace Domain transfer Transfers may be done at all times. (Losing Registrar may refuse a transfer within 60 days of registration or another transfer). Contacts are cloned and get a new id which is selected by the system. The gaining registrar can check the new contact handles using infodomain after the transfer. The authinfo will be changed automatically on transfer for security reasons. The gaining registrar can check the new authinfo using infodomain. No transfer within 60 days of registration or another transfer: this is enforced by the registry by setting the servertransferprohibited flag. Contact objects remain attached to the domain. The gaining registrar can view them but can't modify them. Best practice: the gaining registrar updates the domain and attaches new contacts. The authinfo stays valid until it is changed by the sponsoring registrar. Authentication/Security DNS Belgium has the same password policy throughout the system: At least one uppercase character [A-Z]. At least one lowercase character [a-z]. At least one numerical character [0-9]. At least one non-alphanumerical character [!"#$%&'()*+,-./:;;<=>?@[]^_` { }] For the EPP password, the length of the password is according to the RFC: 8-16 characters. For web passwords and authinfo associated with domains, we allow 8-32 characters. EPP and web passwords: 8-16 Lower case letters (a-z) Upper case letters (A-Z) Numbers (0-9) Special characters (!"#$%&'()*+,-./:;;<=>?@[\]^_`{ }~) at least three of the four categories authinfo: 8-32 at least one alphanumeric character ( A to Z ;; both lower and uppercase letters), at least one numeric character ( 0 9 ) as well as or one special character. 2.2 Commonalities Following business rules are identical before and after migration: Domain creation: o Multi-year registrations with auto-renew and renew command. Domain deletion: o Deletes are effective immediately and the domain goes in redemption. Copyright Ó 2016 DNS Belgium vzw/asbl 4

5 o Domain end-of-live is fully ICANN compliant: 30 days redemption (restore possible). + 5 days pendingdelete (no restore possible). no transfer possible during redemptionperiod. Change registrant of a domain name: o Allowed by using update-domain. Contact updates: o All changes are allowed. 3 EPP 3.1 Differences Following EPP actions are different before and after migration. Action New Old Session management DNS Belgium allows 4 simultaneous EPP sessions (connections) per registrar with our EPP server. When you open more connections, the oldest connection will be closed automatically. Max 4 simultaneous sessions allowed. On 5 sessions, the new session is closed. Greeting Session timeout is 240 seconds. <?xml version="1.0" encoding="utf-8"?> <epp xmlns="urn:ietf:params:xml:ns:epp-1.0"> <!--Your IP is [ ]--> <greeting> <svid>epp.dnsbelgium.be</svid> <svdate> t12:40:18.989z</svdate> Session timeout is 240 seconds or transactions. <?xml version="1.0" encoding="utf-8" standalone="no"?> <epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi=" <greeting> <svid>test-brussels</svid> <svdate> t12:39: z</svdate> <svcmenu> Copyright Ó 2016 DNS Belgium vzw/asbl 5

6 Login Poll <svcmenu> <version>1.0</version> <lang>en</lang> <objuri>urn:ietf:params:xml:ns:epp-1.0</objuri> <objuri>urn:ietf:params:xml:ns:domain-1.0</objuri> <objuri>urn:ietf:params:xml:ns:contact-1.0</objuri> <svcextension> <exturi>urn:ietf:params:xml:ns:secdns- 1.1</extURI> <exturi>urn:ietf:params:xml:ns:rgp-1.0</exturi> </svcextension> </svcmenu> <dcp> <access> <all/> </access> <statement> <purpose> <admin/> <prov/> </purpose> <recipient> <ours/> <public/> </recipient> <retention> <stated/> </retention> </statement> </dcp> </greeting> </epp> At least one extension should be mentioned in the login. It is possible to use commands even if the extension wasn't mentioned during login. There is no follow-up for unacknowledged poll messages. The poll command is the only way to receive server-generated messages. DNS Belgium recommends to check poll messages at least daily. <version>1.0</version> <lang>en</lang> <objuri>urn:ietf:params:xml:ns:domain-1.0</objuri> <objuri>urn:ietf:params:xml:ns:contact-1.0</objuri> <objuri>urn:ietf:params:xml:ns:host-1.0</objuri> <svcextension> <exturi>urn:ietf:params:xml:ns:secdns-1.1</exturi> <exturi>urn:ietf:params:xml:ns:rgp-1.0</exturi> <exturi>urn:ietf:params:xml:ns:launch-1.0</exturi> <exturi>urn:ietf:params:xml:ns:signedmark-1.0</exturi> <exturi>urn:ietf:params:xml:ns:mark-1.0</exturi> </svcextension> </svcmenu> <dcp> <access> <all/> </access> <statement> <purpose> <admin/> <prov/> </purpose> <recipient> <ours/> <public/> </recipient> <retention> <stated/> </retention> </statement> </dcp> </greeting> </epp> Extensions used during the session should be mentioned in login. Poll messages that are not picked up within 24 hours, are sent to the notification address. Copyright Ó 2016 DNS Belgium vzw/asbl 6

7 Create/ Update domain Hosts: host attributes. Because DNS Belgium uses host attributes, some further explanation is needed on changes when glue records are involved: 1. When the name server is in the rem section and no glue is provided: remove the name server together with all its glue records. 2. When the name server is in the rem section and glue records are provided: remove specific glue records. 3. When all glue records are provided together with the name server in the rem section: remove the name servers. Hosts: host objects. Info domain Info domain - Example Authorization: Dates: The authinfo must be provided for anyone other than the sponsoring registrar. If the authinfo is given, it must be correct. Dates in the response are rounded to the millisecond. Message counter: Hosts: There is no msgq. Host attributes. <?xml version="1.0" encoding="utf-8"?> <epp xmlns="urn:ietf:params:xml:ns:epp-"xmlns:domain="urn:ietf:params:xml:ns:domain-1.0"> <response> <result code="1000"> <msg>command completed successfully</msg> </result> <resdata> <domain:infdata> <domain:name>test.vlaanderen</domain:name> <domain:roid>d vlaander</domain:roid> <domain:status s="ok"/> Authorization: Dates: No authorization required. When the performing registrar is the sponsoring registrar or when valid authinfo is provided, the authinfo is also returned. When invalid authinfo is provided, the server responds with a 2202 response code. Dates in the response are rounded to the microsecond. Message counter: Hosts: Each response has a msgq. Host objects. <?xml version="1.0" encoding="utf-8" standalone="no"?> <epp xmlns="urn:ietf:params:xml:ns:epp-1.0"xmlns:xsi=" <response> <result code="1000"> <msg>command completed successfully</msg> </result> <msgq count="11" id=" "/> <resdata> <domain:infdata xmlns="urn:ietf:params:xml:ns:domain-" xmlns:domain="urn:ietf:params:xml:ns:domain-1.0"> <domain:name>test.vlaanderen</domain:name> <domain:roid>d vlaander</domain:roid> Copyright Ó 2016 DNS Belgium vzw/asbl 7

8 <domain:registrant>jojo </domain:registrant> <domain:contact type="admin">jojo </domain:contact> <domain:contact type="tech">jojo </domain:contact> <domain:ns> <domain:hostattr> <domain:hostname>ns1.test.vlaanderen</domain:hostname> <domain:hostaddr ip="v4"> </domain:hostaddr> </domain:hostattr> </domain:ns> <domain:clid>testregistrar</domain:clid> <domain:crid>testregistrar</domain:crid> <domain:crdate> t07:10:38.598z</domain:crdate> <domain:upid>registry</domain:upid> <domain:update> t07:14:00.313z</domain:update> <domain:exdate> t07:10:38.598z</domain:exdate> <domain:trdate> t07:14:00.209z</domain:trdate> <domain:authinfo> <domain:pw>661:g5gqy1i"1m6iri,34<wfi<8}]82<</domain:pw> </domain:authinfo> </domain:infdata> </resdata> <trid> <cltrid>abc-12345</cltrid> <svtrid>5c207ce3-a e-9d83-a40958a911db</svtrid> </trid> </response> </epp> <domain:status s="ok"/> <domain:registrant>jojo </domain:registrant> <domain:contacttype="admin">jojo </domain:contact> <domain:contacttype="tech">jojo </domain:contact> <domain:ns> <domain:hostobj>ns1.dns.brussels</domain:hostobj> </domain:ns> <domain:host>ns1.dns.brussels</domain:host> <domain:host>ns3.dns.brussels</domain:host> <domain:clid>testregistrar</domain:clid> <domain:crid>testregistrar</domain:crid> <domain:crdate> t12:50: z</domain:crdate> <domain:upid>testregistrar</domain:upid> <domain:update> t13:54: z</domain:update> <domain:exdate> t00:00: z</domain:exdate> <domain:authinfo> <domain:pw>r#lw%x+s7u</domain:pw> </domain:authinfo> </domain:infdata> </resdata> <trid> <cltrid>abc-12345</cltrid> <svtrid> testregistrar-vlaanderen</svtrid> </trid> </response> </epp> Create/Update contact Info contact postalinfo: Required attribute type= loc or int. When using type int, only ASCII may be used. When using type loc, non ASCII characters may be used. Authorization: The authinfo must be provided for anyone other than the sponsoring registrar. If the authinfo is given, it must be correct. postalinfo: In contact objects, only the internationalized (type= int ) fields can be used. Authorization: No authorization required. When the performing registrar is the sponsoring registrar or when valid authinfo is provided, the authinfo is also returned. When invalid authinfo is provided, the server responds with a 2202 response code. Copyright Ó 2016 DNS Belgium vzw/asbl 8

9 Dates: Dates in the response are rounded to the millisecond. Message counter: There is no msgq. Dates: Dates in the response are rounded to the microsecond. Message counter: Each response has a msgq. Info contact - Example <?xml version="1.0" encoding="utf-8"?> <epp xmlns="urn:ietf:params:xml:ns:epp-1.0"xmlns:contact="urn:ietf:params:xml:ns:contact-1.0"> <response> <result code="1000"> <msg>command completed successfully</msg> </result> <resdata> <contact:infdata> <contact:id>dago </contact:id> <contact:roid>c vlaander</contact:roid> <contact:status s="ok"/> <contact:postalinfo type="int"> <contact:name>philip Dubois</contact:name> <contact:org>dns Belgium</contact:org> <contact:addr> <contact:street> Philipssite 5 bus 13</contact:street> <contact:city>leuven</contact:city> <contact:sp/> <contact:pc>3001</contact:pc> <contact:cc>be</contact:cc> <?xml version="1.0" encoding="utf-8" standalone="no"?> <epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi=" <response> <result code="1000"> <msg>command completed successfully</msg> </result> <msgq count="8" id=" "/> <resdata> <contact:infdata xmlns="urn:ietf:params:xml:ns:contact-1.0" xmlns:contact="urn:ietf:params:xml:ns:contact-1.0"> <contact:id>dago </contact:id> <contact:roid>c vlaander</contact:roid> <contact:status s="linked"/> <contact:status s="ok"/> <contact:postalinfo type="int"> <contact:name>philip Dubois</contact:name> <contact:org>dns Belgium</contact:org> <contact:addr> <contact:street>philipssite 5 bus 13</contact:street> <contact:city>leuven</contact:city> <contact:pc>3001</contact:pc> Copyright Ó 2016 DNS Belgium vzw/asbl 9

10 </contact:addr> </contact:postalinfo> <contact:clid>testregistrar</contact:clid> <contact:crid>testregistrar</contact:crid> <contact:crdate> t07:02:55.568z</contact:crdate> <contact:authinfo> <contact:pw/> </contact:authinfo> </contact:infdata> </resdata> <trid> <cltrid>abc-12345</cltrid> <svtrid>0789ac12-6b c74fa9b48d38</svtrid> </trid> <contact:cc>be</contact:cc> </contact:addr> </contact:postalinfo> <contact:clid>testregistrar</contact:clid> <contact:crid>testregistrar</contact:crid> <contact:crdate> t11:53: z</contact:crdate> </contact:infdata> </resdata> <trid> <cltrid>abc-12345</cltrid> <svtrid> testregistrar-vlaander</svtrid> </trid> </response> </epp> </response> </epp> Check domain Request: Max number to check: 5 IDN domain names: U-label or A-label in request. A-label in response. Unsupported IDN character returns Invalid. Response: Status: Uses true and false. Reason: Registered, Reserved. Errors: all errors return Invalid (unsupported tld, invalid U-label, invalid A-label, etc.). Request: Max number to check: 5 IDN domain names: A-label only. Response: Status: Uses 0 and 1. Reason: Object exists, Reservation. Errors: Errors are specified: e.g. Unsupported TLD, Invalid A-Label, Invalid U-Label. Copyright Ó 2016 DNS Belgium vzw/asbl 10

11 Check contact Transfer domain - period Error responses Protected transactions threshold Request: Max number to check: 5 Response: Status: Uses true and false. Only validity period allowed: <domain:period unit="y">1</domain:period>. Months are not accepted. If the maximum registration period of 10 years is exceeded by the transfer request, the request is accepted but the period is not extended. Example error response: <?xml version="1.0" encoding="utf-8"?> <epp xmlns="urn:ietf:params:xml:ns:epp-1.0"> <response> <result code="2302"> <msg>object exists</msg> <extvalue> <value> <epp>error</epp> </value> <reason>given domain [transfer.vlaanderen] already exists.</reason> </extvalue> </result> <trid> <svtrid>703a0b89-49ac-44ed-b9d3-15a101abf524</svtrid> </trid> </response> </epp> When the threshold for protected transactions is reached, the server responds with a 2308 response code. Request: Max number to check: 5 Response: Status: Uses 0 and 1. Periods between 1 year and 10 years (included) are accepted. Default period is 1 year. Months are not accepted. transfer requests are rejected when the given period could result in a validity period exceeding 10 years, unless the transfer is requested with a period of 1 year. Example error response: <?xml version="1.0" encoding="utf-8" standalone="no"?> <epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi=" <response> <result code="2302"> <msg>object exists</msg> <extvalue> <value> <exception>domainalreadyexists</exception> </value> <reason>domain [transfer.vlaanderen]: Cannot create already existing domain.</reason> </extvalue> </result> <trid> <svtrid> a-test5- brussels</svtrid> </trid> </response> </epp> NA Copyright Ó 2016 DNS Belgium vzw/asbl 11

12 3.2 Commonalities Following EPP actions are identical before and after migration: Logout: o Session is closed after logout. Create/Renew domain Period: o Periods between 1 year and 10 years (included) are accepted. o Default period is 1 year. o Months are not accepted. Create/Update domain DNSSEC: o The EPP interface accepts DS records only. A maximum of 6 DS records can be provisioned per domain. o When maxsiglife is provided by the registrar, we will return a 2102 Unimplemented option. Create/Update domain contacts: o A domain object should have at least one contact of type registrant, at least one contact of type admin, and at least one contact of type technical. o In total, a domain object may have a maximum of 10 contacts. o The contact of type bill is not supported. Create/Update domain hosts: o IDN in hosts: only A-labels are accepted, all characters are allowed. o Number of hosts allowed: 0-13 o Create/Update contact authinfo: o authinfo should be empty on creating/updating of the contact. Copyright Ó 2016 DNS Belgium vzw/asbl 12

13 4 Registrar panel 4.1 Differences Following web actions are different before and after migration. Action New Old Transactions No domain/contact transactions available EPP transactions can be done via the web interface. Protected transactions DNS Belgium implements protected transactions. More information can be found in the General manual. NA Authentication DNS Belgium implements 2 factor verification on the registrar website. More information can be found in the Web manual. Password validity is restricted in time: 180 days for master user password. 90 days for other users. Search DNS Belgium provides a search of domain names in your own portfolio. Search consists of a link to the Whois: Statistics & Reports NA search domain search contact search host Following statistics and reports are available: Domain count Domain development Ticket statistics Object list export Object queries Billing DNS Belgium only provides billing lines, which can be consulted per month. Following billing information is available: Credit management Billing lines Copyright Ó 2016 DNS Belgium vzw/asbl 13

14 Configuration Following items can be viewed/configured: Main contact data Public contact data Registrar contacts: Tech, Admin and Abuse. EPP password EPP IP addresses Registrar admin/tech/abuse contact Following items are not implemented: Registrar billing contact: Your billing contact can be changed by sending an to support. Notification address: will not be used in our system. Only EPP Poll will be used. There will be no follow up of unacknowledged poll messages. Announce addresses: Can be maintained via our.be platform. Following items can be viewed/configured: Main contact data Registrar contacts Public contact data Notification address EPP password EPP IP addresses Announce addresses 5 DAS & WHOIS 5.1 Differences Following web actions are different before and after migration. Action New Old Domain availability check There is no separate domain availability service. Registrars should use check-domain via EPP. With the finger service, you can check the availability of a domain name. command line WHOIS The command-line whois is according to ICANN requirements. All labels are shown, including those with empty value. ROID of contacts is according to ICANN requirements. The ROID is not according to ICANN requirements: ROID = handle + -TLD (not according to icann specs) Copyright Ó 2016 DNS Belgium vzw/asbl 14

15 5.2 Commonalities Following actions are identical before and after migration: The whois via the DNS Belgium website does not change. The mandatory web whois as described by ICANN does not change. 6 Registry actions with visibilty to the registrar/registrant 6.1 Differences Following internal actions are different before and after migration. Action New Old Threshold for protected transactions Domain actions - Undelete domain Block registrar EPP IP addresses DNS Belgium can reset/change the threshold. When DNS Belgium deletes a domain name, it is possible to undo it during the pendingdelete period. DNS Belgium implements a registrar lifecycle with 4 states. Initial > Active <> Blocked > Deleted It is possible to block a registrar that is in breach of contract. This registrar can t do any actions on the registry system. Only the registrar can add/delete IP addresses for EPP. DNS Belgium can view IP addresses. NA There is no undo of the delete possible in the pendingdelete period. There is no registrar lifecycle. Registrars who are in breach can be blocked by setting: EPP enabled to No credits to 0 (zero) The registry can add/delete IP addresses as well as the registrar. Copyright Ó 2016 DNS Belgium vzw/asbl 15

16 6.2 Commonalities Following internal actions are identical before and after migration: Update EPP status on domain: o The registry can update all EPP statuses of a domain name. URS procedure o The URS procedure is implemented according to ICANN requirements. EPP IP addresses o IP addresses are valid for all registrars. Copyright Ó 2016 DNS Belgium vzw/asbl 16