TECHNICAL UPDATES | .GLOBAL Domain Registry

This page will include information connected to .GLOBAL technical solutions including SRS and OT&E.

In general, the information is a copy of messages sent from .GLOBAL back-end provider; Afilias, to all accredited Registrars.

SRS and OT&E MAINTENANCE NOTIFICATIONS

Afilias SRS Scheduled Maintenance 10 December 2016 (COMPLETED)

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Unavailable
  • Web Based Administrative Interface at https://admin.afilias-srs.net: Unavailable
  • DNS: Resolution is unaffected
  • Whois: Unavailable
  • OT&E: Available

Afilias SRS Scheduled Maintenance 19 November 2016 (COMPLETED)

Please be advised the TLDs managed under epp.afilias-srs.net is scheduled for maintenance on 19 November 2016 between 16:00 – 20:00 UTC.

To see a complete list of the TLDs you are currently accredited for in the Afilias Shared Registry system, please log into the Afilias Shared Registry Web Admin Tool at https://admin.afilias-srs.net/ and click on the portfolios under “Portfolio” on the homepage.

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Unavailable
  • Web based Administrative Interface at https://admin.afilias-srs.net: Unavailable
  • DNS: Resolution is unaffected
  • WHOIS: Unavailable
  • OT&E: Available
  • Report Library: Available

After the maintenance, the Afilias SRS system will be compliant with the RDDS Display and Labelling policy as posted on the ICANN website at: https://www.icann.org/resources/pages/rdds-labeling-policy-2016-07-26-en.

RDDS Labeling policy rescinded: This policy was rescinded on 18 October 2016. It will no longer take effect on 1 February 2017, as originally scheduled. ICANN opened a public comment period on a revised version of the policy on 21 October 2016. Comments will be accepted until 23:59 UTC on 12 December 2016.

When approved, the Registrar object in the Afilias SRS system will support 2 new fields after the maintenance – Registrar Abuse Contact Email and Registrar Abuse Contact Phone.

Also, the Registrar Whois Server and Registrar Web URL fields which were previously optional on the Registrar object will be required after the maintenance is complete.

Registrars are encouraged to add information for all the aforementioned fields via the Registrar Update functionality in the Web Admin Tool on the Afilias SRS after the maintenance. This will ensure compliance with the RDDS Labelling policy as specified by ICANN.

Afilias SRS OT&E Scheduled Maintenance Notice 27 October 2016 (COMPLETED)

Please be advised that the Afilias SRS OT&E is scheduled for maintenance on 27 October 2016 15:00 – 19:00 UTC.

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Available
  • Web based Administrative Interface at https://admin.afilias-srs.net Available
  • DNS: Resolution is unaffected
  • WHOIS: Available
  • OT&E: Unavailable
  • Report Library: Available

After the maintenance, the Afilias SRS OT&E system will be compliant with the RDDS Display and Labelling policy as posted on the ICANN website at: https://www.icann.org/resources/pages/rdds-labeling-policy-2016-07-26-en.

Therefore, the Registrar object in the Afilias SRS OT&E system will support 2 new fields after the maintenance – Registrar Abuse Contact Email and Registrar Abuse Contact Phone. Also, the Registrar Whois Server and Registrar Web URL fields which were previously optional on the Registrar object will be required
after the maintenance is complete.

Registrars are encouraged to add information for all the aforementioned fields via the Registrar Update functionality in the Web Admin Tool on the Afilias SRS OT&E after the maintenance. This will ensure compliance with the RDDS Labelling policy as specified by ICANN.

SRS MAINTENANCE AUGUST 27 2016 (COMPLETED)

Please be advised the TLDs managed under epp.afilias-srs.net is scheduled for maintenance on 27 August 2016 between 15:00 UTC – 19:00 UTC.

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Unavailable
  • Web based Administrative Interface at https://admin.afilias-srs.net: Unavailable
  • DNS: Resolution is unaffected
  • WHOIS: Unavailable
  • OT&E: Available
  • Report Library: Available

New usage of EPP fee extension

Prior to this maintenance, the fee extension was supported for premium domains. After this maintenance, the EPP fee extension is enhanced to support non-premium names as well. Please note that this extension is optional for non-premium domains.

If this extension with the correct price is submitted, the request will be processed successfully. If this extension is submitted with the incorrect price, an error message will be returned.

Prices that are returned in the responses to a DomainCheck command do not include adjustments due to marketing promotions or taxes such as VAT.

Prices that are submitted along with the fee extension in the DomainCreate, DomainTransfer and DomainRenew commands must include the wholesale price (EXCLUDING adjustments due to marketing promotions or taxes such as VAT).

For example:

Wholesale DomainCreate price for domain.exampletld for 1year – $10
Marketing program adjustment at point of sale – $2
Therefore price charged to registrar – $8
Price to be submitted by Registrar in the fee extension along with the DomainCreate command – 10

The URI assignment of the fee extension namespace will update to “urn:ietf:params:xml:ns:fee-0.8”. A request submitted with an older version in the fee extension namespace will continue to work. However, the response from the registry will include the updated namespace.

IDN Codepoint Updates

The following IDNs have had the corresponding codepoints removed in order to comply with ICANN’s IDN testing.

Danish (da)

U+00E4;; # LATIN SMALL LETTER A WITH DIAERESIS
U+00F6;; # LATIN SMALL LETTER O WITH DIAERESIS

Latvian (lv)

U+0071;; # LATIN SMALL LETTER Q
U+0077;; # LATIN SMALL LETTER W
U+0078;; # LATIN SMALL LETTER X
U+0079;; # LATIN SMALL LETTER Y

Lithuanian (lt)

U+0071;; # LATIN SMALL LETTER Q
U+0077;; # LATIN SMALL LETTER W
U+0078;; # LATIN SMALL LETTER X

Please note the OTE environment will be upgraded between 15:00 UTC – 19:00 UTC on July 14, 2016

SRS MAINTENANCE JULY 19 2016 (COMPLETED)

The Shared Registry is scheduled for maintenance on 19 July 2016 between 15:00 – 19:00 UTC.

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Available
  • Web Based Administrative Interface at https://admin.afilias-srs.net: Available
  • DNS: Resolution is unaffected
  • Whois: Available
  • OT&E: Unavailable

After the maintenance, the certificate chain of the OTE services and the IP address for the OT&E system would be changed.
We highly recommend to connect using the respective hostname, ote1.afilias-srs.net and not the IP address.

Please ensure your EPP client is set to trust the following two Root Certificate authorities from Entrust to avoid connection issue:

G2 Root located at https://www.entrust.com/ and L1K Root (EV Root) located at: https://www.entrust.com/

Here is the Certificate chain before and after the maintenance:

Certificate chain BEFORE the maintenance

0 s: EPP Server certificate

i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2012 Entrust, Inc. – for authorized use only/CN=Entrust Certification Authority – L1K

1 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2012 Entrust, Inc. – for authorized use only/CN=Entrust Certification Authority – L1K

i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2009 Entrust, Inc. – for authorized use only/CN=Entrust Root Certification Authority – G2

2 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2009 Entrust, Inc. – for authorized use only/CN=Entrust Root Certification Authority – G2

i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2009 Entrust, Inc. – for authorized use only/CN=Entrust Root Certification Authority – G2

Certificate chain AFTER the maintenance

0 s: EPP Server certificate

i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2012 Entrust, Inc. – for authorized use only/CN=Entrust Certification Authority – L1K

1 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2012 Entrust, Inc. – for authorized use only/CN=Entrust Certification Authority – L1K

i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2009 Entrust, Inc. – for authorized use only/CN=Entrust Root Certification Authority – G2

2 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/ 2009 Entrust, Inc. – for authorized use only/CN=Entrust Root Certification Authority – G2

i:/C=US/O=Entrust, Inc./OU=www.entrust.net/CPS is incorporated by reference/OU=(c) 2006 Entrust, Inc./CN=Entrust Root Certification Authority

If you have any questions, please contact Afilias Technical Support.

SRS MAINTENANCE JULY 9 2016 (COMPLETED)

The Shared Registry is scheduled for maintenance on 9 July 2016 between 15:00 UTC – 19:00 UTC.

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Unavailable
  • Web Based Administrative Interface at https://admin.afilias-srs.net: Unavailable
  • DNS: Resolution is unaffected
  • Whois: Unavailable
  • OT&E: Available

SRS OTE MAINTENANCE JULY 14 2016 (COMPLETED)

Please be advised the TLDs managed under ote1.afilias-­srs.net is scheduled for maintenance on 14 July 2016 between 15:00 UTC ­and 19:00 UTC.
During the maintenance, you may expect the following:

  • SRS: Available
  • Web based Administrative Interface at https://admin.afilias-srs.net: Available
  • DNS: Resolution is unaffected
  • WHOIS: Available
  • OT&E at ote1.afilias-srs.net: Unavailable
  • Report Library: Available

Prior to this maintenance, the fee extension was supported for premium domains. After this maintenance, the EPP fee extension is enhanced to support non ­premium names as well. Please note that this extension is optional for non premium domains. If this extension with the correct price is submitted, the request will be processed successfully. If this extension is submitted
with the incorrect price, an error message will be returned.

Prices that are returned in the responses to a DomainCheck command do not include adjustments due to marketing promotions or taxes such as VAT. Prices that are submitted along with the fee extension in the DomainCreate, DomainTransfer and DomainRenew commands must include the wholesale price (EXCLUDING adjustments due to marketing promotions or taxes such as VAT).

For example:

Wholesale DomainCreate price for domain.exampletld for 1year ­ $10
Marketing program adjustment at point of sale ­ $2
Therefore price charged to registrar ­ $8
Price to be submitted by Registrar in the fee extension along with the DomainCreate command ­- 10

The URI assignment of the fee extension namespace will update to “urn:ietf:params:xml:ns:fee­0.8”. A request submitted with an older version in the fee extension namespace will continue to work. However, the response from the registry will include the updated namespace.

IDN Codepoint Updates

The following IDNs have had the corresponding codepoints removed in order to comply with ICANN’s IDN testing.

Danish (da)
U+00E4;; # LATIN SMALL LETTER A WITH DIAERESIS
U+00F6;; # LATIN SMALL LETTER O WITH DIAERESIS

Latvian (lv)
U+0071;; # LATIN SMALL LETTER Q
U+0077;; # LATIN SMALL LETTER W
U+0078;; # LATIN SMALL LETTER X
U+0079;; # LATIN SMALL LETTER Y

Lithuanian (lt)
U+0071;; # LATIN SMALL LETTER Q
U+0077;; # LATIN SMALL LETTER W
U+0078;; # LATIN SMALL LETTER X

Any existing domains making use of these code points will continue to work and resolve as they have in the past, but registrars will be unable to create new domains that contain these code points.

SRS MAINTENANCE APRIL 9 2016 (COMPLETED)

Please be advised the .GLOBAL SRS will undergo maintenance on April 9 2016 between 15:00 and 19:00 UTC.

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Unavailable
  • Web Based Administrative Interface at https://admin.afilias-srs.net: Unavailable
  • DNS: Resolution is unaffected
  • Whois: Unavailable
  • OT&E: Available

To see a complete list of the TLDs you are currently accredited for in the Afilias Shared Registry system, please log into the Afilias Shared Registry Web Admin Tool at https://admin.afilias-srs.net/ and click on the portfolios under “Portfolio” on the homepage.

SRS MAINTENANCE MARCH 12 2016 (COMPLETED)

Please be advised the .GLOBAL SRS will undergo maintenance on March 12th, 2016 between 15:00 and 19:00 UTC.

During the maintenance, you may expect the following:

  • SRS at epp.afilias-srs.net: Unavailable
  • Web Based Administrative Interface at https://admin.afilias-srs.net: Unavailable
  • DNS: Resolution is unaffected
  • Whois: Unavailable

After the Maintenance the following changes will take place:

Newly created objects will receive ID’s that are longer than those created prior to the maintenance.

The following IDs will be affected:

Domain ID (ROID)
Contact ID (ROID)
Server TRID

For example a domain created prior to the maintenance would receive an ID similar to D1234567-AGRS.

After the maintenance, newly created objects will receive ID’s similar to D123456789012345678-AGRS.

All current ID’s will remain unchanged.

SRS OT&E MAINTENANCE FEBRUARY 18 2016 (Completed)

Please be advised the TLDs managed under ote1.afilias-srs.net – including .GLOBAL, will undergo maintenance on February 18, 2016 between 16:00 and 20:00 UTC.

To see a complete list of the TLDs you are currently accredited for in the Afilias Shared OT&E Registry system, please log into the Afilias Shared OT&E Registry Web Admin Tool at https://ote1.afilias-srs.net/ and click on the portfolios under “Portfolio” on the homepage.

During the maintenance, you may expect the following:

  • SRS at ote1.afilias-srs.net: Unavailable
  • Web Based Administrative Interface at https://ote1.afilias-srs.net: Unavailable
  • DNS: Resolution is unaffected
  • Whois: Unavailable

After the Maintenance the following changes will take place:

Newly created objects will receive ID’s that are longer than those created prior to the maintenance. The following IDs will be affected:

  • Domain ID (ROID)
  • Contact ID (ROID)
  • Server TRID

For example a domain created prior to the maintenance would receive an ID similar to D1234567-AGRS.

After the maintenance, newly created objects will receive ID’s similar to D123456789012345678-AGRS.

All current ID’s will remain unchanged.

SRS MAINTENANCE DECEMBER 29 2015 (COMPLETED)

Please note that as of 15:00 UTC on 29 December 2015, the Afilias Shared Complex will be changing the SSL certificate in the Production environment to utilize the SHA-2 algorithm.

For more details on the reason and methods behind the SHA-2 migration, you can read more here:

https://www.entrust.com/lp/sha-1-sha-2-faq/ In order to ensure there are no problems in connecting to the Afilias Shared Complex Production environment, registrars may need to download and install the Entrust Root certificate for SHA-2 support.

The new Entrust Root Certificate can be downloaded via the following link: https://www.entrust.net/downloads/binary/entrust_g2_ca.cer

Note that certificates may not work seamlessly with older server-client configurations and changes to your epp client may be required if your implementation has the old certificate manually configured. If you have any questions, please contact Afilias technical support: techsupport@afilias-srs.net

SRS OT&E MAINTENANCE DECEMBER 10 2015 (COMPLETED)

Please note that as of 15:00 UTC on 10 December 2015, the Afilias Shared Complex will be changing the SSL certificate in the OT&E environment to utilize the SHA-2 algorithm.

For more details on the reason and methods behind the SHA-2 migration, you can read more here:

https://www.entrust.com/lp/sha-1-sha-2-faq/ In order to ensure there are no problems in connecting to the Afilias Shared Complex OT&E environment, registrars may need to download and install the Entrust Root certificate for SHA-2 support.

The new Entrust Root Certificate can be downloaded via the following link: https://www.entrust.net/downloads/binary/entrust_g2_ca.cer

Note that certificates may not work seamlessly with older server-client configurations and changes to your epp client may be required if your implementation has the old certificate manually configured.

If you have any questions, please contact Afilias technical support: techsupport@afilias-srs.net. The SSL certificate will be changed in the production environment on December 29 2015 @ 15:00 UTC

SRS Maintenance December 9 2015 (COMPLETED)

Rescheduled SRS maintenance

Afilias Shared complex (epp.afilias-srs.net) maintenance originally scheduled for 05 November 2015 between 16:00 UTC – 20:00 UTC has been rescheduled for 09 December 2015 between 16:00 – 20:00 UTC. During the maintenance, you may expect the following:

  • SRS: Available
  • Web Based Administrative Interface: Available
  • DNS: Resolution is unaffected
  • Whois: AvailableOT&E: Available

After the Maintenance the following changes will take place: RDDS (Whois) Clarifications Afilias will be making changes to accommodate the clarifications ICANN has provided about the WHOIS output. That clarification document can be found at the following link: https://www.icann.org/resources/pages/registry-agreement-raa-rdds-2015-04-27-en

SRS MAINTENANCE ON August 29 2015 (COMPLETED)

Please be advised that Afilias SRS will be unavailable on 29 August 2015 between 15:00 and 19:00 UTC. During this time, we will be implementing “Unassociated Contact Object Management Policy”.

During the maintenance window:

  • epp.afilias-srs.net: Not Available
  • https://admin.afilias-srs.net: Not Available
  • whois.afilias-srs.net: 43: Not Available
  • DNS: Resolution is unaffected OT&E: Available

More information Unassociated Contact Object Management Policy, please see “Unassociated Contact Object Management Policy

SRS MAINTENANCE July 6 2015 (COMPLETED)

Afilias – the technical back-end provider for .global, has scheduled a SRS maintenance on 06 July 2015 between 15:00 and 16:00 UTC.

During the maintenance, you may expect the following:

  • Reports at reports.afilias.info: Intermittent Connectivity During this time, if you are connected to the Reports Library at reports.afilias.info, you may get disconnected. To re-establish your connection, please log back in using your credentials.

SRS MAINTENANCE JUNE 3 2015 (COMPLETED)

Afilias – the technical backend provider for .global, has scheduled a SRS maintenance on June 3 2015 between 15:00-16:00 UTC During the maintenance, you may expect the following:

  • SRS: Intermittent Connectivity
  • Web Based Administrative Interface: Intermittent Connectivity
  • DNS: Resolution is unaffected
  • Whois: Intermittent Connectivity
  • OT&E: Available

TECHNICAL INFORMATION

IDN CODEPOINTS UPDATES

Please be advised that from August 27 2016, the following IDNs have had the corresponding codepoints removed in order to comply with ICANN’s IDN testing.

Danish (da)

U+00E4;; # LATIN SMALL LETTER A WITH DIAERESIS
U+00F6;; # LATIN SMALL LETTER O WITH DIAERESIS

Latvian (lv)

U+0071;; # LATIN SMALL LETTER Q
U+0077;; # LATIN SMALL LETTER W
U+0078;; # LATIN SMALL LETTER X
U+0079;; # LATIN SMALL LETTER Y

Lithuanian (lt)

U+0071;; # LATIN SMALL LETTER Q
U+0077;; # LATIN SMALL LETTER W
U+0078;; # LATIN SMALL LETTER X

CIPHER SUITE POLICY CHANGES

Cipher Suite Policy Changes Please be advised that effective 19 September 2015, only the following SSL ciphers will be allowed when connecting to Afilias SRS production system.

  • 128bit RC4-SHA (TLS1.0/1.2)
  • 128bit AES128-SHA (TLS1.0/1.2, DTLS1.0)
  • 256bit AES256-SHA (TLS1.0/1.2, DTLS1.0)
  • 192bit DES-CBC3-SHA (TLS1.0/1.2, DTLS1.0)
  • 128bit AES128-SHA256 (TLS1.2)
  • 256bit AES256-SHA256 (TLS1.2)

This update will be applied to the OT&E system on 18 Aug 2015.

UNASSOCIATED CONTACT OBJECT MANAGEMENT POLICY

Child Hosts for domain on serverHold

As a security instrument, .GLOBAL has adopted the following policy:

Child hosts CAN NOT be created for a domain name with status serverHold

Rationale: A domain name with status serverHold is NOT resolved in DNS. Child hosts can allow an attacker or malicious actor to keep their domain up indefinitely even if the domain is placed on serverHold. The IPs on the child hosts will still respond authoritatively in the DNS. Due to this, a child hosts cannot be created if domains are on serverHold.

The status of a domain name can be investigated using WHOIS

.GLOBAL SRS USPPORT UTF8 CHARACTERS FOR CONTACTS

Please be advised that Afilias Shared Registry System will support UTF8 characters within the contact postal info data effective 5 October 2015 no sooner than 15:00 UTC and no later than 16:00 UTC.

When submitting UTF8 characters the registrar must specify the contact postal info type as “loc” (localized). Once the UTF8 support is enabled in the Afilias’ shared registry system, registrars will have two options when specifying contact postal info, either type=”loc” or type=”int” (internationalized).

Internationalized will only accepts ASCII characters whereas the localized type will accept both UTF8 and ASCII. If the registrar attempts to submit UTF8 characters while specifying type=”int” then the registry will throw an error.

Please note that only one address type (either “loc” or “int”) is permitted per contact. UTF8 support will be enabled in the OT&E environment effective 15 Sept 2015.