gTLD Registrar Manual - Part V Delta v1.0

gTLD Registrar Manual Part V: Delta Guide
10 n o v e mb e r 2011
Budgetontwerp
2012
gTLD
Registrar Manual
Part V : Delta
Version 1.0
Copyright  2016 DNS Belgium vzw/asbl
1
gTLD Registrar Manual Part V: Delta Guide
Table of contents
Table of contents .............................................................................................................................................. 2
1 Introduction ................................................................................................................................................... 3
2 Business rules ................................................................................................................................................ 3
2.1 Differences .......................................................................................................................................................................... 3
2.1. Differences ......................................................................................................... Error! Bookmark not defined.
2.2 Commonalities .................................................................................................................................................................. 4
3 EPP ..................................................................................................................................................................... 4
3.1 Differences .......................................................................................................................................................................... 4
3.2 Commonalities .................................................................................................................................................................. 9
4 Registrar panel ........................................................................................................................................... 10
4.1 Differences ........................................................................................................................................................................10
5 DAS & WHOIS .............................................................................................................................................. 11
5.1 Differences ........................................................................................................................................................................11
5.2 Commonalities ................................................................................................................................................................11
6 Registry actions with visibilty to the registrar/registrant......................................................... 12
6.1 Differences ........................................................................................................................................................................12
6.2 Commonalities ................................................................................................................................................................12
Copyright  2016 DNS Belgium vzw/asbl
2
gTLD Registrar Manual Part V: Delta Guide
1 Introduction
This document is used to provide the registrars with the changes when migrating from the current
system to DNS Belgium's new Registration system.
2 Business rules
2.1 Differences
Following business rules are different before and after migration.
Action
.
New
Old
Billing/Credits
Post-pay system, no credits.
Pre-pay system and virtual credits.
Both registry and registrar are protected from going
into deep costs with the Protected transactions
threshold.
Domain renewal
auto-renew per registrar is default and can't be
turned off.
The renew command is also implemented because
of ICANN requirements.
Opt-in per registrar for auto-renew, default is set
to active when a new registrar is created.
Registrars can also send in renew commands.
The EPP statusses ServerRenewProhibited /
ClientRenewProhibited have no effect on autoThe EPP statusses ServerRenewProhibited /
renews. Status is automatically set by the
ClientRenewProhibited can be used by the registrar system when the max renewal period is
to disable the auto-renew feature on a per-domain
reached.
basis. Auto-renews are prevented by this status.
Renews are also prevented by this status (as per
definition).
Grace periods
DNS Belgium doesn’t support grace periods as
described in RFC 3915.
All grace periods are applicable and have an
impact on billing:




Domain transfer
Transfers may be done at all times. (Losing
Registrar may refuse a transfer within 60 days of
registration or another transfer).
No transfer within 60 days of registration or
another transfer: this is enforced by the registry
by setting the serverTransferProhibited flag.
Contacts are cloned and get a new id which is
selected by the system. The gaining registrar can
check the new contact handles using info-domain
after the transfer.
Contact objects remain attached to the domain.
The gaining registrar can view them but can't
modify them. Best practice: the gaining registrar
updates the domain and attaches new contacts.
The authInfo will be changed automatically on
transfer for security reasons. The gaining registrar
can check the new authInfo using info-domain.
Authentication/Security
addGrace
renewGrace
autorenewGrace
transferGrace
DNS Belgium has the same password policy
Copyright  2016 DNS Belgium vzw/asbl
The authInfo stays valid until it is changed by the
sponsoring registrar.
EPP and web passwords: 8-16
3
gTLD Registrar Manual Part V: Delta Guide
throughout the system:




At least one uppercase character [A-Z].
At least one lowercase character [a-z].
At least one numerical character [0-9].
At least one non-alphanumerical character
[!"#$%&'()*+,-./:;<=>?@[]^_` {|}]
For the EPP password, the length of the password
is according to the RFC: 8-16 characters.
For web passwords and authInfo associated with
domains, we allow 8-32 characters.




Lower case letters (a-z)
Upper case letters (A-Z)
Numbers (0-9)
Special characters (!"#$%&'()*+,./:;<=>?@[\]^_`{|}~)
 at least three of the four categories
authInfo: 8-32
 at least one alphanumeric character (‘A’ to ‘Z’;
both lower and uppercase letters),
 at least one numeric character (‘0’ – ‘9’) as
well as or one special character.
2.2 Commonalities
Following business rules are identical before and after migration:

Domain creation:
o


Domain deletion:
o
Deletes are effective immediately and the domain goes in redemption.
o
Domain end-of-live is fully ICANN compliant:

30 days redemption (restore possible).

+ 5 days pendingDelete (no restore possible).

no transfer possible during redemptionPeriod.
Change registrant of a domain name:
o

Multi-year registrations with auto-renew and renew command.
Allowed by using update-domain.
Contact updates:
o
All changes are allowed.
3 EPP
3.1 Differences
Following EPP actions are different before and after migration.
Action
New
Session
management
DNS Belgium allows 4 simultaneous EPP sessions
Max 4 simultaneous sessions allowed.
(connections) per registrar with our EPP server. When you
On 5 sessions, the new session is closed.
open more connections, the oldest connection will be
closed automatically.
Copyright  2016 DNS Belgium vzw/asbl
Old
4
gTLD Registrar Manual Part V: Delta Guide
Session timeout is 240 seconds.
Session timeout is 240 seconds or 15.000
transactions.
Greeting
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp1.0">
<!--Your IP is [1.2.3.4]-->
<greeting>
<svID>epp.dnsbelgium.be</svID>
<svDate>2016-0728T12:40:18.989Z</svDate>
<svcMenu>
<version>1.0</version>
<lang>en</lang>
<objURI>urn:ietf:params:xml:ns:epp1.0</objURI>
<objURI>urn:ietf:params:xml:ns:domain
-1.0</objURI>
<objURI>urn:ietf:params:xml:ns:contac
t-1.0</objURI>
<svcExtension>
<extURI>urn:ietf:params:xml:ns:secD
NS-1.1</extURI>
<extURI>urn:ietf:params:xml:ns:rgp1.0</extURI>
</svcExtension>
</svcMenu>
<dcp>
<access>
<all/>
</access>
<statement>
<purpose>
<admin/>
<prov/>
</purpose>
<recipient>
<ours/>
<public/>
</recipient>
<retention>
<stated/>
</retention>
</statement>
</dcp>
</greeting>
</epp>
<?xml version="1.0" encoding="UTF-8"
standalone="no"?>
<epp
xmlns="urn:ietf:params:xml:ns:epp1.0"
xmlns:xsi="http://www.w3.org/2001/XM
LSchema-instance">
<greeting>
<svID>test-brussels</svID>
<svDate>2016-0728T12:39:19.554551Z</svDate>
<svcMenu>
<version>1.0</version>
<lang>en</lang>
<objURI>urn:ietf:params:xml:ns
:domain-1.0</objURI>
<objURI>urn:ietf:params:xml:ns
:contact-1.0</objURI>
<objURI>urn:ietf:params:xml:ns
:host-1.0</objURI>
<svcExtension>
<extURI>urn:ietf:params:xml:
ns:secDNS-1.1</extURI>
<extURI>urn:ietf:params:xml:
ns:rgp-1.0</extURI>
<extURI>urn:ietf:params:xml:
ns:launch-1.0</extURI>
<extURI>urn:ietf:params:xml:
ns:signedMark-1.0</extURI>
<extURI>urn:ietf:params:xml:
ns:mark-1.0</extURI>
</svcExtension>
</svcMenu>
<dcp>
<access>
<all/>
</access>
<statement>
<purpose>
<admin/>
<prov/>
</purpose>
<recipient>
<ours/>
<public/>
</recipient>
<retention>
<stated/>
</retention>
</statement>
</dcp>
</greeting>
</epp>
Login
At least one extension should be mentioned in the login.
Extensions used during the session should be
mentioned in login.
It is possible to use commands even if the extension
wasn't mentioned during login.
Poll
There is no follow-up for unacknowledged poll messages. Poll messages that are not picked up within 24
The poll command is the only way to receive serverhours, are sent to the notification e-mail address.
generated messages. DNS Belgium recommends to check
poll messages at least daily.
Copyright  2016 DNS Belgium vzw/asbl
5
gTLD Registrar Manual Part V: Delta Guide
Create/
Update domain
Hosts:
Hosts:
 host attributes.
 host objects.
Because DNS Belgium uses host attributes, some further
explanation is needed on changes when glue records are
involved:
1.
2.
3.
Info domain
When the name server is in the rem section and
no glue is provided: remove the name server
together with all its glue records.
When the name server is in the rem section and
glue records are provided: remove specific glue
records.
When all glue records are provided together with
the name server in the rem section: remove the
name servers.
Authorization:


The authInfo must be provided for anyone other
than the sponsoring registrar.
If the authInfo is given, it must be correct.
Authorization:



Dates:

Dates:
Dates in the response are rounded to the
millisecond.
Message counter:

There is no msgQ.
Hosts:

Info domain Example
No authorization required.
When the performing registrar is the
sponsoring registrar or when valid
authInfo is provided, the authInfo is also
returned.
When invalid authInfo is provided, the
server responds with a 2202 response
code.

Dates in the response are rounded to
the microsecond.
Message counter:

Each response has a msgQ.
Hosts:
Host attributes.
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-"xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
<resData>
<domain:infData>
<domain:name>test.vlaanderen</domain:name>
<domain:roid>D1000000006-VLAANDER</domain:roid>
<domain:status s="ok"/>
<domain:registrant>JOJO201610065957</domain:registrant>
<domain:contact type="admin">JOJO201610065957</domain:contact>
<domain:contact type="tech">JOJO201610065957</domain:contact>
<domain:ns>
<domain:hostAttr>
<domain:hostName>ns1.test.vlaanderen</domain:hostName>
<domain:hostAddr ip="v4">172.3.2.1</domain:hostAddr>
</domain:hostAttr>
</domain:ns>
<domain:clID>TESTREGISTRAR</domain:clID>
<domain:crID>TESTREGISTRAR</domain:crID>
<domain:crDate>2016-10-18T07:10:38.598Z</domain:crDate>
<domain:upID>REGISTRY</domain:upID>
Copyright  2016 DNS Belgium vzw/asbl

Host objects.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp1.0"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
<msgQ count="11" id="14028120"/>
<resData>
<domain:infData xmlns="urn:ietf:params:xml:ns:domain" xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
<domain:name>test.vlaanderen</domain:name>
<domain:roid>D0000019243-VLAANDER</domain:roid>
<domain:status s="ok"/>
<domain:registrant>JOJO201610065957</domain:registrant>
<domain:contacttype="admin">JOJO201610065957</domain:contact>
<domain:contacttype="tech">JOJO201610065957</domain:contact>
<domain:ns>
<domain:hostObj>ns1.dns.brussels</domain:hostObj>
</domain:ns>
<domain:host>ns1.dns.brussels</domain:host>
<domain:host>ns3.dns.brussels</domain:host>
<domain:clID>testregistrar</domain:clID>
<domain:crID>testregistrar</domain:crID>
6
gTLD Registrar Manual Part V: Delta Guide
<domain:upDate>2016-10-27T07:14:00.313Z</domain:upDate>
<domain:exDate>2026-10-18T07:10:38.598Z</domain:exDate>
<domain:trDate>2016-10-27T07:14:00.209Z</domain:trDate>
<domain:authInfo>
<domain:pw>661:G5GqY1I"1m6iRi,34&lt;WFi&lt;8}]82&lt;</domain:pw>
</domain:authInfo>
</domain:infData>
</resData>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>5c207ce3-a004-472e-9d83-a40958a911db</svTRID>
</trID>
</response>
</epp>
<domain:crDate>2016-10-06T12:50:34.819566Z</domain:crDate>
<domain:upID>testregistrar</domain:upID>
<domain:upDate>2016-10-06T13:54:38.767737Z</domain:upDate>
<domain:exDate>2017-10-05T00:00:00.000000Z</domain:exDate>
<domain:authInfo>
<domain:pw>r#lw%x+s7U</domain:pw>
</domain:authInfo>
</domain:infData>
</resData>
<trID>
<clTRID>ABC-12345</clTRID>
<svTRID>2016111714573127020202-testregistrar-vlaanderen</svTRID>
</trID>
</response>
</epp>
Create/Update
contact
postalInfo:
postalInfo:
Info contact
Authorization:



Required attribute type=’loc’ or ‘int’. When using
type ‘int’, only ASCII may be used. When using
type ‘loc’, non ASCII characters may be used.
The authInfo must be provided for anyone other
than the sponsoring registrar.
If the authInfo is given, it must be correct.

Authorization:



Dates:

Info contact Example
No authorization required.
When the performing registrar is the
sponsoring registrar or when valid
authInfo is provided, the authInfo is also
returned.
When invalid authInfo is provided, the
server responds with a 2202 response
code.
Dates:
Dates in the response are rounded to the
millisecond.
Message counter:

In contact objects, only the
internationalized (type=’int’) fields can be
used.
There is no msgQ.

Dates in the response are rounded to
the microsecond.
Message counter:

Each response has a msgQ.
<?xml version="1.0" encoding="UTF-8"?>
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0"xmlns:contact="urn:ietf:params:xml:ns:contact1.0">
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<response>
<result code="1000">
<msg>Command completed successfully</msg>
<response>
<result code="1000">
<msg>Command completed successfully</msg>
</result>
</result>
<resData>
<msgQ count="8" id="4762361"/>
<contact:infData>
<contact:id>DAGO201408293575</contact:id>
<contact:roid>C1000000007-VLAANDER</contact:roid>
<contact:status s="ok"/>
<contact:postalInfo type="int">
Copyright  2016 DNS Belgium vzw/asbl
<resData>
<contact:infData xmlns="urn:ietf:params:xml:ns:contact-1.0"
xmlns:contact="urn:ietf:params:xml:ns:contact-1.0">
<contact:id>DAGO201408293575</contact:id>
<contact:roid>C0000001275-VLAANDER</contact:roid>
7
gTLD Registrar Manual Part V: Delta Guide
<contact:name>Philip Dubois</contact:name>
<contact:status s="linked"/>
<contact:org>DNS Belgium</contact:org>
<contact:status s="ok"/>
<contact:addr>
<contact:postalInfo type="int">
<contact:street> Philipssite 5 bus 13</contact:street>
<contact:name>Philip Dubois</contact:name>
<contact:city>Leuven</contact:city>
<contact:org>DNS Belgium</contact:org>
<contact:sp/>
<contact:addr>
<contact:pc>3001</contact:pc>
<contact:street>Philipssite 5 bus 13</contact:street>
<contact:cc>BE</contact:cc>
<contact:city>Leuven</contact:city>
</contact:addr>
<contact:pc>3001</contact:pc>
</contact:postalInfo>
<contact:email>[email protected]</contact:email>
<contact:cc>BE</contact:cc>
</contact:addr>
<contact:clID>TESTREGISTRAR</contact:clID>
</contact:postalInfo>
<contact:crID>TESTREGISTRAR</contact:crID>
<contact:email>[email protected]</contact:email>
<contact:crDate>2016-10-18T07:02:55.568Z</contact:crDate>
<contact:clID>testregistrar</contact:clID>
<contact:authInfo>
<contact:crID>testregistrar</contact:crID>
<contact:pw/>
</contact:authInfo>
</contact:infData>
</resData>
<trID>
<contact:crDate>2014-08-29T11:53:38.605552Z</contact:crDate>
</contact:infData>
</resData>
<trID>
<clTRID>ABC-12345</clTRID>
<clTRID>ABC-12345</clTRID>
<svTRID>0789ac12-6b83-4659-9842-c74fa9b48d38</svTRID>
</trID>
<svTRID>2016120109160569146731-testregistrar-vlaander</svTRID>
</trID>
</response>
</response>
</epp>
</epp>
Check domain
Request:
Request:





Max number to check: 5
IDN domain names: U-label or A-label in request.
A-label in response.
Unsupported IDN character returns ‘Invalid’.
Response:



Check contact
Status: Uses true and false.
Reason: Registered, Reserved.
Errors: all errors return ‘Invalid’ (unsupported tld,
invalid U-label, invalid A-label, etc.).
Response:



Status: Uses 0 and 1.
Reason: Object exists, Reservation.
Errors: Errors are specified: e.g.
Unsupported TLD, Invalid A-Label,
Invalid U-Label.
Request:
Request:


Max number to check: 5
Response:
Transfer
domain period
Max number to check: 5
IDN domain names: A-label only.




Status: Uses true and false.
Only validity period allowed: <domain:period
unit="y">1</domain:period>.
Months are not accepted.
If the maximum registration period of 10 years is
Copyright  2016 DNS Belgium vzw/asbl
Max number to check: 5
Response:




Status: Uses 0 and 1.
Periods between 1 year and 10 years
(included) are accepted.
Default period is 1 year.
Months are not accepted.
8
gTLD Registrar Manual Part V: Delta Guide

exceeded by the transfer request, the request is
accepted but the period is not extended.
transfer requests are rejected when the
given period could result in a validity
period exceeding 10 years, unless the
transfer is requested with a period of 1
year.
Error
responses
Example error response:
Example error response:
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp1.0">
<response>
<result code="2302">
<msg>Object exists</msg>
<extValue>
<value>
<epp>Error</epp>
</value>
<reason>Given domain
[transfer.vlaanderen] already
exists.</reason>
</extValue>
</result>
<trID>
<svTRID>703a0b89-49ac-44ed-b9d315a101abf524</svTRID>
</trID>
</response>
</epp>
<?xml version="1.0" encoding="UTF-8"
standalone="no"?>
<epp
xmlns="urn:ietf:params:xml:ns:epp1.0"
xmlns:xsi="http://www.w3.org/2001/XM
LSchema-instance">
<response>
<result code="2302">
<msg>Object exists</msg>
<extValue>
<value>
<exception>DomainAlreadyEx
ists</exception>
</value>
<reason>Domain
[transfer.vlaanderen]: Cannot create
already existing domain.</reason>
</extValue>
</result>
<trID>
<svTRID>201607151354238927994A
-test5-brussels</svTRID>
</trID>
</response>
</epp>
Protected
transactions
threshold
When the threshold for protected transactions is reached,
the server responds with a 2308 response code.
NA
3.2 Commonalities
Following EPP actions are identical before and after migration:
 Logout:
o Session is closed after logout.
 Create/Renew domain – Period:
o Periods between 1 year and 10 years (included) are accepted.
o Default period is 1 year.
o Months are not accepted.
 Create/Update domain – DNSSEC:
o The EPP interface accepts DS records only. A maximum of 6 DS records can be
provisioned per domain.
o When maxSigLife is provided by the registrar, we will return a 2102 Unimplemented
option.
 Create/Update domain – contacts:
o A domain object should have at least one contact of type registrant, at least one
contact of type admin, and at least one contact of type technical.
o In total, a domain object may have a maximum of 10 contacts.
o The contact of type bill is not supported.
 Create/Update domain – hosts:
Copyright  2016 DNS Belgium vzw/asbl
9
gTLD Registrar Manual Part V: Delta Guide
o
o
o
o
IDN in hosts: only A-labels are accepted, all characters are allowed.
Number of hosts allowed: 0-13
Create/Update contact – authInfo:
authInfo should be empty on creating/updating of the contact.
4 Registrar panel
4.1 Differences
Following web actions are different before and after migration.
Action
New
Old
Transactions
No domain/contact transactions available
EPP transactions can be done via the
web interface.
Protected
transactions
DNS Belgium implements protected transactions. More
information can be found in the General manual.
NA
Authentication
DNS Belgium implements 2 factor verification on the registrar
website. More information can be found in the Web manual.
Password validity is restricted in time:


Search
Statistics &
Reports
DNS Belgium provides a search of domain names in your own
portfolio.
Search consists of a link to the Whois:
NA
Following statistics and reports are
available:








Billing
180 days for master user
password.
90 days for other users.
search domain
search contact
search host
Domain count
Domain development
Ticket statistics
Object list export
Object queries
DNS Belgium only provides billing lines, which can be consulted Following billing information is available:
per month.

Credit management
Billing lines
Configuration
Following items can be viewed/configured:






Main contact data
Public contact data
Registrar contacts: Tech, Admin and Abuse.
EPP password
EPP IP addresses
Registrar admin/tech/abuse contact
Following items are not implemented:

Registrar billing contact: Your billing contact can be
changed by sending an e-mail to support.
Copyright  2016 DNS Belgium vzw/asbl
Following items can be
viewed/configured:






Main contact data
Registrar contacts
Public contact data
Notification e-mail address
EPP password
EPP IP addresses
Announce e-mail addresses
10
gTLD Registrar Manual Part V: Delta Guide

Notification e-mail address: will not be used in our
system. Only EPP Poll will be used. There will be no
follow up of unacknowledged poll messages.
Announce e-mail addresses: Can be maintained via our .be
platform.
5 DAS & WHOIS
5.1 Differences
Following web actions are different before and after migration.
Action
New
Old
Domain
availability check
There is no separate domain availability service. Registrars
should use check-domain via EPP.
With the finger service, you can check the
availability of a domain name.
command line
WHOIS
The command-line whois is according to ICANN requirements.
The ROID is not according to ICANN
requirements:

All labels are shown, including those with empty value.
ROID of contacts is according to ICANN requirements.
ROID = handle + -TLD (not according to
icann specs)
5.2 Commonalities
Following actions are identical before and after migration:
 The whois via the DNS Belgium website does not change.
 The mandatory web whois as described by ICANN does not change.
Copyright  2016 DNS Belgium vzw/asbl
11
gTLD Registrar Manual Part V: Delta Guide
6 Registry actions with visibilty to the
registrar/registrant
6.1 Differences
Following internal actions are different before and after migration.
Action
New
Old
Threshold for
protected
transactions
DNS Belgium can reset/change the threshold.
NA
Domain actions Undelete domain
When DNS Belgium deletes a domain name, it is possible to
undo it during the pendingDelete period.
There is no undo of the delete possible in
the pendingDelete period.
Block registrar
DNS Belgium implements a registrar lifecycle with 4 states.
There is no registrar lifecycle.
Initial > Active <> Blocked > Deleted
Registrars who are in breach can be
blocked by setting:
It is possible to block a registrar that is in breach of contract.
This registrar can’t do any actions on the registry system.
EPP IP addresses Only the registrar can add/delete IP addresses for EPP.
DNS Belgium can view IP addresses.
Threshold for
protected
transactions
DNS Belgium can reset/change the threshold.


EPP enabled to No
credits to 0 (zero)
The registry can add/delete IP addresses
as well as the registrar.
NA
6.2 Commonalities
Following internal actions are identical before and after migration:
 Update EPP status on domain:
o The registry can update all EPP statuses of a domain name.
 URS procedure
o The URS procedure is implemented according to ICANN requirements.
 EPP IP addresses
o IP addresses are valid for all registrars.
Copyright  2016 DNS Belgium vzw/asbl
12